https://community.cisco.com/t5/network-access-control/misleading-warning-message-when-revoking-byod-users-certificates/m-p/5000498#M586535 <P>Any ideas?</P> Fri, 19 Jan 2024 06:01:31 GMT rezaalikhani 2024-01-19T06:01:31Z https://community.cisco.com/t5/network-access-control/misleading-warning-message-when-revoking-byod-users-certificates/m-p/4997566#M586361 <P>Hello'</P><P>Consider the following scenario:</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="rezaalikhani_0-1705401769946.png" style="width: 999px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/207443i4898DFF8E3F246DE/image-size/large?v=v2&amp;px=999" role="button" title="rezaalikhani_0-1705401769946.png" alt="rezaalikhani_0-1705401769946.png" /></span></P><P>Suppose I want to revoke the assigned certificate to "User2". So, as you can see above, I select the entry and then select the "<STRONG>Revoke Certificate</STRONG>" option. Now ISE warns me by displaying the following message:</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="rezaalikhani_1-1705401991265.png" style="width: 999px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/207444i697A0E36744547C2/image-size/large?v=v2&amp;px=999" role="button" title="rezaalikhani_1-1705401991265.png" alt="rezaalikhani_1-1705401991265.png" /></span></P><P>I think the warning message is somehow misleading. Although the same user used the same PC for BYOD operation multiple times (for demonstrating purpose), the warning message says there are not certificates for the MAC address. Can we create certificates solely based on the MAC addresses?</P><P>Now, I select Yes and the following operation takes place:</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="rezaalikhani_2-1705403559160.png" style="width: 999px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/207446i9709F257A2FEC585/image-size/large?v=v2&amp;px=999" role="button" title="rezaalikhani_2-1705403559160.png" alt="rezaalikhani_2-1705403559160.png" /></span></P><P>As you can see, ISE revoked any certificates for an endpoint, regardless of the certificates for each user...</P><P>Now if you redo the same operation, ISE shows us the following error message:</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="rezaalikhani_3-1705403737824.png" style="width: 400px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/207447iDA8A251E7840ABD2/image-size/medium?v=v2&amp;px=400" role="button" title="rezaalikhani_3-1705403737824.png" alt="rezaalikhani_3-1705403737824.png" /></span></P><P>I think ISE needs some better messages... Any ideas?</P><P>Thanks</P> Tue, 16 Jan 2024 11:17:23 GMT https://community.cisco.com/t5/network-access-control/misleading-warning-message-when-revoking-byod-users-certificates/m-p/4997566#M586361 rezaalikhani 2024-01-16T11:17:23Z https://community.cisco.com/t5/network-access-control/misleading-warning-message-when-revoking-byod-users-certificates/m-p/5000498#M586535 <P>Any ideas?</P> Fri, 19 Jan 2024 06:01:31 GMT https://community.cisco.com/t5/network-access-control/misleading-warning-message-when-revoking-byod-users-certificates/m-p/5000498#M586535 rezaalikhani 2024-01-19T06:01:31Z