Mobile Phones with ISE

[benolyndav]

Hi

We want  use ISE for our mobie phones using Cerificate authentication (no portal ) can we just get generate a CSR on ISE get it signed and then use in rules to authenticate phones, obviously the phones will have a cert signed by the same CA.?

Is there a link to a good document at all

Thanks

[Rob Ingram]

@benolyndav the best way to dsitribute certificates to mobile devices is using MDM, however if you do not have an MDM you can use the ISE certificate provisioning portal - https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/200534-ISE-2-0-Certificate-Provisioning-Portal.html or BYOD portal https://community.cisco.com/t5/security-knowledge-base/cisco-ise-byod-prescriptive-deployment-guide/ta-p/3641867

[benolyndav]

@Rob Ingram We do have an MDM and are hoping to push the cert out via the MDM, I proably didnt explain accuratley, could we use interna;/eternal CA? what certs do i need/use? any links for this please or suggestions.

Thanks

[Rob Ingram]

@benolyndav if you have an external MDM then that MDM would be integrated into a CA. From ISE perspective, you'd need to trust the CA that issued the certificates to the mobile devices.