Hello'
Consider the following scenario:

Suppose I want to revoke the assigned certificate to "User2". So, as you can see above, I select the entry and then select the "Revoke Certificate" option. Now ISE warns me by displaying the following message:

I think the warning message is somehow misleading. Although the same user used the same PC for BYOD operation multiple times (for demonstrating purpose), the warning message says there are not certificates for the MAC address. Can we create certificates solely based on the MAC addresses?
Now, I select Yes and the following operation takes place:

As you can see, ISE revoked any certificates for an endpoint, regardless of the certificates for each user...
Now if you redo the same operation, ISE shows us the following error message:

I think ISE needs some better messages... Any ideas?
Thanks