BYOD authentication vs changing EAP certificate

[peter.matuska1]

Hi, I have following question regarding BYOD.

I have self-signed certificate created for EAP. Then letsencrypt for Admin and Portal. I did BYOD onboarding for MAC and iPhone successfully. Everything works.

Then I added EAP under the letsencrypt and tried to reconnect. MAC connected successfully (I had to accept the certificate) but iPhone was rejected.

So I delete the iPhone completely and did the onboarding again and everything works fine. So my question is what is different between MAC and iPhone since MAC was able to connect and iPhone was not. Was it because the fact that iPhone has the iSE certificate in the profile?

[Timothy Abbott · Accepted solution]

Without debug logs, it is hard to say but based on the screenshot, the iPhone didn't like the certificate that was presented by the PSN.  I can tell you that iPhone supplicant can be tempermental in that even though it has a root installed an the certificate being presented from the PSN has been signed by it, iPhone will still make the end user accept the certificate.

Regards,

-Tim

[peter.matuska1]

hi,

ok, so lets call it iphone specific behaviour.