ISE BYOD iOS 11 - Profile Installation Failed

[wileong]

ISE - 2.3 Patch

iOS 11.2.2 and iOS 10.x

Tested on the above OS

BYOD flow works until installing client certificate with error of "Profile Installation Failed".

I have tried re-generating ISE Root CA and the problem persist.

Any idea?

Wing Churn

[Jason Kunst]

Right Apple has made real difficult if you don’t have a valid trusted cert you have to go through the flow 2x

Once to get the server cert and once you have this then you have to go to general about settings something like that to trust the cert

Then go through it again

The dCloud demo for mobility sandbox and the ise secure access wizard sandbox has ise 2.3 with well known cert. this will show the correct behavior

[ciscoworlds]

I tested BYOD with both of iPAD Air (iOS 11.0) and Android 7.0, but was unsuccessful on both of them!

On Android after being redirected to the BYOD portal and clicking on the link to download Network Setup Assistant app, none of the browsers let me open Play.Google.com saying the certificate is untrusted (I'm using an internal MS CA). Even I downloaded that app manually and I got "Certificate Generation Failed" message like the screenshot posted before.

On Apple iOS 11, I got redirected to BYOD portal, but after clicking on the link to download Profile, it prompted me to download my internal root CA certificate (.cer file) and an .xml file, but after clicking on the Download button, it says "Download Failed".

As a result, I wasn't able to make BYOD work on ISE 2.4 patch 1 yet. I even have created a separate post about this at ISE BYOD: certificate generation failed link.