I'm having a problem with BYOD on ISE 3.0 sp 5. The user is able to authenticate, and the Client Provisioning process starts, but then it fails and I see the following in the client logs:
ScepWrapper::InstallCert start
ScepWrapper::InstallCert: Reading scep response file [C:\Users\XXXXXX\AppData\Local\Temp\response.cer].
ScepWrapper::InstallCert CreateFile failed
ScepWrapper::InstallCert end
Failed to install identity certificate. Error code: [183]. Check the certificate template on the CA server and the certificate issued for the client on the CA server. Certificate should be for the purpose of Client Authentication.
ApplyCert - End...
ApplyCert failed .... 0ec5f8f0-7d4a-11ec-9908-fe0711751a17
The setup is such that ISE is an intermediate CA to an internal root CA.
The BYOD Portal is assigned a public wildcard cert.
I verified that the certificate template is configured for Client Authentication.
