ISE BYOD portal error- failed to register the device'

[vinmangal]

Hi Cisco expert team,

Need your help to resolve this issue.

I have built WiFi test lab set-up with dual SSID to test smart phones on boarding , registration, certificate provisioning etc.

I am using two Cisco ISE ( as Admin, MnT and other one as PSN ) on version 2.3, patch 5 

When I try to register any phone or laptop on BYOD portal. It throws error- "failed to register the device".

I am not sure why ISE is not letting me register any Android, Laptop or any smart phones on BYOD portal.

I can not see any error in Radius logs on ISE for why device failing to  register. 

Please advise if you know the solutions. I am using EAP-TLS based authentication.

1st SSID - MAB based authentication  for on-boarding phones 

2nd SSID- Dot1x based authentication for already registered phones on 1st SSID.

Regards,

Vinay

[Jason Kunst · Accepted solution]

Have you went through this guide?
https://community.cisco.com/t5/security-documents/cisco-ise-byod-prescriptive-deployment-guide/ta-p/3641867

I would recommend tac to help troubleshoot

[vinmangal · Accepted solution]

Many Thanks Jason for sharing this pdf document.

Issue got resolved after re-creating duplicate BYOD Portal from existing one.

Byod portal got corrupted for some unknown reason.

[Jason Kunst]

Thank you