ISE authenticate cert from different issuer

[Zhicheng Lun]

Hi Experts,

A customer is considering to delpoy BYOD with ISE and machine certificate authentication for IoT devices, since the coporate endpoints have already installed coporate CA signed certificate, but IoT endpoints have no certificate yet. Customer would like to setup ISE as internal CA to issue ISE signed certificate as to IoT endpoints, so the question is, is a ISE able to authenticate both IoT endpoints and BYOD endpoints which signed by internal CA and coporate CA?

Thanks in advance.

[smashash · Accepted solution]

Yes.

please see Re: Using different CAs for different devices' cert based authentication via ISE

[Jason Kunst]

As long as you install the trusted chain on ISE then should work fine

Issuance of certs from the internal ca will need to be a customer created automated process using our certificate provisioning portal and or the API

The BYOD process is only automated for Windows OS X Apple iOS android and chrome book