https://community.cisco.com/t5/network-access-control/byod-user-with-multiple-devices/m-p/2728370#M57378 <P>If a user onboards 3 BYOD devices on corporate network (iPad, Android phone, laptop), will the MS CA issue separate certs for each device or will it re-new the cert, adding as SAN the additional device's MAC address?&nbsp; i.e.:&nbsp; 3 certs or 1 cert with 3 SANs?&nbsp; Thanks.</P> Mon, 11 Mar 2019 06:05:50 GMT Catherine Paquet 2019-03-11T06:05:50Z https://community.cisco.com/t5/network-access-control/byod-user-with-multiple-devices/m-p/2728370#M57378 <P>If a user onboards 3 BYOD devices on corporate network (iPad, Android phone, laptop), will the MS CA issue separate certs for each device or will it re-new the cert, adding as SAN the additional device's MAC address?&nbsp; i.e.:&nbsp; 3 certs or 1 cert with 3 SANs?&nbsp; Thanks.</P> Mon, 11 Mar 2019 06:05:50 GMT https://community.cisco.com/t5/network-access-control/byod-user-with-multiple-devices/m-p/2728370#M57378 Catherine Paquet 2019-03-11T06:05:50Z https://community.cisco.com/t5/network-access-control/byod-user-with-multiple-devices/m-p/2728371#M57380 <P>This will create 3 different certs. for each device as certs. are configured based on hostname.&nbsp;</P><P>&nbsp;</P><P>A SAN is used when there could be multiple DNS records. For example, <A href="https://example.com" target="_blank">https://example.com</A> is inputted by the user but only <A href="https://www.example.com" target="_blank">https://www.example.com</A> is configured on the MS CA, then an error will present informing the user that the connection is refused.&nbsp;</P> Mon, 28 Sep 2015 18:31:38 GMT https://community.cisco.com/t5/network-access-control/byod-user-with-multiple-devices/m-p/2728371#M57380 aleccham 2015-09-28T18:31:38Z