ISE certificate issue with android

[maxaxim111]

802.1x with workstations is working without issues however Android devices are flagging the following error in the logs: "EAP-TLS failed SSL/TLS handshake because the client rejected the ISE local-certificate"

We have tried removing the old certificate, restarted the PSN and ISE servers and forced a resync as well. Apple and Windows devices are showing the certificates are fine and NOT flagging the same error, they operate 100% of the time.

[nspasov]

A couple of questions:

1. You are performing EAP-TLS authentication? If yes, can you explain how you get the CSR and then the signed certificate on the Android device?

2. Do you have the Root CA's certificate (The CA that signed the ISE certificate) in the Android trusted certificate store?

Thank you for rating helpful posts!

[jan.nielsen]

Also, be sure to remember to import the whole ca-chain for the ise cert on ise.