Launch Apple Profile and Certificate Installers Now button redirects to Null

[Donald Haskins]

I am attempting to configure a BYOD Portal. 

On the portal, I accept terms and continue to page 3 and Click on the 'Launch Apple Profile and Certificate Installers Now' button.  I am redirected to https://null:8443/auth/cp/errorPage.html.   

The Flow is iPad -> Meraki AP -> ISE

We are running ISE2.2 Patch 1

Any assistance would be Greatly Appreciated.

Thank you,

- donald.haskins@energytransfer.com

[hslai]

Please specify which version/release you are using on the Meraki AP.

The null thing in the URL is likely due to Retry-URL not defined.

[Donald Haskins]

hslai,

That was helpful, as I did not have the Retry-URL defined.   I configured the URL for www.google.com, but am still redirected to https://null:8443/auth/cp/errorPage.html.

Thank you,

- donald.haskins@energytransfer.com

[Charlie Moreton]

Have you created a Native Supplicant Profile (Policy > Policy Elements > Results > Client Provisioning > Resources)?

Have you created a Client Provisioning Policy referencing that Profile (Policy > Client Provisioning)?

It sounds like you've already created an Authorization Profile to redirect to the BYOD Portal.  What is in the first dropdown under Web Redirection?

[Charlie Moreton]

Also check to ensure the the Static IP/Host name/FQDN box is not checked with an empty value:

If all of these items have been completed and are set as expected, insert the ip address if the PSN you are trying to reach into the Static IP/Host name/FQDN entry.

[hslai · Accepted solution]

Since you are using a Meraki AP, please ensure following How To: Integrate Meraki Networks with ISE.

Is BYOD working with other Cisco network devices, such as a Cisco Catalyst switch or a Cisco WLC?

After reviewing past internal bugs with similar errors, that is a generic error on ISE client provisioning so the message itself not providing us much info. If possible, please open a Cisco TAC case and engage our Cisco TAC team to help troubleshooting. If you rather debugging yourself, you may enable DEBUG on the components client, guest, provisioning, scep, and ca-service, recreate it and examine the debug log files ise-psc.log with events timestamped during your recreate. You might also follow Quick tip using web inspector to debug mobile safar to check on the download link.