ISE Internal CA

[VVVENKAT]

Hi All

One of my customer would like to use ISE internal CA for providing certs to corporate end points as well as for BYOD devices. Hope  it is possible to provision different certs for corporate and BYOD so that it can be used to assign different Authorization policies. Appreciate your confirmation.

Many Thanks

V.Venkata Manikandan

[Jason Kunst · Accepted solution]

Are they expecting to have all endpoints Go through the BYOD flow?

I think you might be able to setup different templates for certificate

How are you going to different which certificate a machine gets? Perhaps for example if machine authentication passes then redirect corporate BYOD flow and Native supplicant provisioning profile differentiated

You should check out the ISE mobility deep dive setup in dCloud and see your different options

Sent from my iPhone