topic Re: Does iOS devices needs to accept the public signed cert in Guest/CWA flow ? in Network Access Control

Does iOS devices needs to accept the public signed cert in Guest/CWA flow ?

musultan — Mon, 18 May 2020 19:11:03 GMT

For the Guest/CWA flow, does Apple iOS devices needs to ACCEPT/Validate the publicly trusted certificates like PEAP or 802.1x ?

Reference Link: When Apple iOS devices use Protected Extensible Authentication Protocol (PEAP) with Cisco ISE or 802.1x, certificate warnings might be displayed even for publicly trusted certificates.

Another Reference Link: When an iOS client first communicates to a PSN it will not explicitly trust the PSN certificate, even though a trusted Certificate Authority has signed the certificate.

Does this limitation applicable to Guest/CWA flow for iOS devices or not ?

Please advise.

Re: Does iOS devices needs to accept the public signed cert in Guest/CWA flow ?

musultan — Wed, 20 May 2020 06:45:00 GMT

Any update on this ?

Re: Does iOS devices needs to accept the public signed cert in Guest/CWA flow ?

musultan — Wed, 20 May 2020 22:14:56 GMT

(updating the thread to help others)

This behavior is for DOT1X only and not applicable to Guest/CWA flow.