topic How to provision a certificate from ISE internal CA to Windows device using SCEP in Network Access Control https://community.cisco.com/t5/network-access-control/how-to-provision-a-certificate-from-ise-internal-ca-to-windows/m-p/3571339#M536856 <HTML><HEAD></HEAD><BODY><P>I have a challenge associated with how to deploy a machine based wireless profile to a shared Windows device to connect to a wireless network. Authentication for these types of devices is using a certificate (machine authentication is not possible due to the AD configuration and the associated trusts). Ultimately I am chasing whether windows native commands can be used to provision a certificate using the ISE SCEP URL. I am running ISE 2.1 with patch 2.</P><P></P><P>Whilst I have the client provisioning process within ISE functioning, this is only applicable to user specific devices where ISE will deploy a user profile to a device. If ISE could provision a machine based profile this issue would not exist.</P><P></P><P>I have existing batch files and processes available for provisioning a certificate from a Microsoft CA, but the interaction with the ISE SCEP process is where I am getting unstuck. Any assistance with how to provision a certificate from ISE' CA to a windows device would be appreciated.</P><P></P><P>The big issue here is the ability to connect a Windows (or Mac) device to a wireless network to facilitate user authentication to an Active Directory domain.</P></BODY></HTML> Thu, 01 Dec 2016 01:23:51 GMT cameronreeves 2016-12-01T01:23:51Z How to provision a certificate from ISE internal CA to Windows device using SCEP https://community.cisco.com/t5/network-access-control/how-to-provision-a-certificate-from-ise-internal-ca-to-windows/m-p/3571339#M536856 <HTML><HEAD></HEAD><BODY><P>I have a challenge associated with how to deploy a machine based wireless profile to a shared Windows device to connect to a wireless network. Authentication for these types of devices is using a certificate (machine authentication is not possible due to the AD configuration and the associated trusts). Ultimately I am chasing whether windows native commands can be used to provision a certificate using the ISE SCEP URL. I am running ISE 2.1 with patch 2.</P><P></P><P>Whilst I have the client provisioning process within ISE functioning, this is only applicable to user specific devices where ISE will deploy a user profile to a device. If ISE could provision a machine based profile this issue would not exist.</P><P></P><P>I have existing batch files and processes available for provisioning a certificate from a Microsoft CA, but the interaction with the ISE SCEP process is where I am getting unstuck. Any assistance with how to provision a certificate from ISE' CA to a windows device would be appreciated.</P><P></P><P>The big issue here is the ability to connect a Windows (or Mac) device to a wireless network to facilitate user authentication to an Active Directory domain.</P></BODY></HTML> Thu, 01 Dec 2016 01:23:51 GMT https://community.cisco.com/t5/network-access-control/how-to-provision-a-certificate-from-ise-internal-ca-to-windows/m-p/3571339#M536856 cameronreeves 2016-12-01T01:23:51Z Re: How to provision a certificate from ISE internal CA to Windows device using SCEP https://community.cisco.com/t5/network-access-control/how-to-provision-a-certificate-from-ise-internal-ca-to-windows/m-p/3571340#M536858 <HTML><HEAD></HEAD><BODY><P>ISE BYOD is limited to user profiles for Windows.</P></BODY></HTML> Thu, 01 Dec 2016 21:26:11 GMT https://community.cisco.com/t5/network-access-control/how-to-provision-a-certificate-from-ise-internal-ca-to-windows/m-p/3571340#M536858 Craig Hyps 2016-12-01T21:26:11Z