Does iOS devices needs to accept the public signed cert in Guest/CWA flow ?

[musultan]

For the Guest/CWA flow, does Apple iOS devices needs to ACCEPT/Validate the publicly trusted certificates like PEAP or 802.1x ?

Reference Link: When Apple iOS devices use Protected Extensible Authentication Protocol (PEAP) with Cisco ISE or 802.1x, certificate warnings might be displayed even for publicly trusted certificates.

Another Reference Link: When an iOS client first communicates to a PSN it will not explicitly trust the PSN certificate, even though a trusted Certificate Authority has signed the certificate.

Does this limitation applicable to Guest/CWA flow for iOS devices or not ?

Please advise.

[musultan]

Any update on this ?

[musultan]

(updating the thread to help others)

This behavior is for DOT1X only and not applicable to Guest/CWA flow.