For your first error: ""unsupported operating system type encountered" does it happen for all Android devices all of the time or is it random? If it is always then make sure you have a "Client Provisioning Policy" for the Android based OS. If it is sometimes then it is probably due to the fact that ISE is not able to properly profile the device as an Android device. For this I would check the DB and look for that mac address and see how ISE has profiled the device.
For your second error: "We are unable to determine access privileges in order to access the network. Please contact your administrator" how This usually means that the user trying to perform on-boarding is not part of the users defined in the "Client Provisioning Policy" So I would start by checking if the user is indeed a member of the allowed groups.
Thank you for rating helpful posts!
