ISE BYOD Single SSID issue with iOS 12.3

[smano]

I am trying single SSID BYOD test with iPhone 12.3.1 at customer site for POC. The device gets stuck in PEAP after provisioning. If i manually kick the client off the WLC, it reconnects correctly with TLS. We have tried with WLC 8.2 and 8.8, ISE 2.3 patch 6. The client hits EAP_TLS policy after 5 mins. We would like to see the device gets switch to TLS method as soon as BYOD registration is done. Do anyone had experienced it? 

[Jason Kunst]

Yes there is a bug for this from Apple side not switching the method. I will get this tomorrow.

[smano]

Hi Jason, 

By any chance do we know whats the ETA for this bug fix? 

[Jason Kunst]

This is an apple issue, we have no control over this, please follow through and attach to TAC case for the defect on that page. I updated them all

[howon · Accepted solution]

Yes known issue:

https://community.cisco.com/t5/security-documents/ise-byod-endpoint-notes/ta-p/3857246#toc-hId-1923889969

[smano]

Thank you @howon and @Jason Kunst