Hello,
If I am understanding correcity "Certificate authentication profile" in ISE is used to perform certificate authentication from external identity source like AD or LDAP. I am wondering when does "certificate store certificates" are brought into use?