ISE 2.1 BYOD remove device from mydevice portal

[Matteo Abrile]

Hello,

I have Cisco ISE 2.1, I deploy BYOD onboarding from wlc. Everythings work fine, but I don't understand "remove device" flow.
If I remove device from mydevice portal, and check in ISE admin I can see endpoint certificate already valid (not revoked), and I can found device in BYOD endpoint.

Why ? I aspect if I remove device everythings remove from ISE, need remove by hand from ISE ?

Thanks

M.

[Rahul Govindan · Accepted solution]

Deleting the device should definitely remove the device endpoint ID from the "RegisteredDevices" endpoint group. I am not sure of the certificate revocation though. I know marking it as Stolen revokes the cert and moves it to the "Blacklist" group, while Lost just moves it to Blacklist (no cert revocation).