Also note that the admin guide section that contains the 'guidance' on client certificates is listed within a section pertaining to the issuance of certificates to ISE itself and not specifically to supplicants. When troubleshooting errors regarding supplicant certificates that may be lacking default key usage requirements/checks for protocols such as EAP-TLS the live logs are not human readable and require knowledge of these requirements in order to resolve the issue(s). See CSCvz78531 for additional details on troubleshooting deficiencies.