ISE , BYOD iphone issue!! client provisioning

[Marcin Zgola]

Guys, when i sent down a profile using native suplicant for iphone, iphone gets it but it does not automatically selects TLS on the SSID.

Here is what happens:

Iphone connects to BOYD-SSID

credentials enter

client provision process

** if Auto-Login is selected problem with self registration!!!!!!!!

bunch of security errors, profile is downloaded

iphone reconnects to BOYD_SSID with credentials initilly entered (therfor MSCHAPv) not TLS

in client provisining cycle.

NOW!!!!

go back to BYOD-SSID and "forget the network", reconnect again, and manually selecting TLS and using the profile previously downloaded, and everything works!!!!

Too many freaking steps for BYOD!!!! I can't have my client tell his employees to do that.

ANy ideas.....

[MM15]

I have the same problem for iOS devices. after downloading profile iphone does not automatically selects TLS on the SSID. it reconnects with PEAP.

it needs "forget the network" and reconnect again with manually selecting TLS and using the profile previously downloaded.

Is it normal for iOS devices ?

[ahollifield]

IMHO, an MDM should really be used these days as Apple and Google continue to lock down mobile devices.  However this thread is originally from 2013 (10 years old!) so better to start a new discussion around your issue.