moto g android phone 4.4.4 does pronpt for certificate download

[HUGH LANCASTER]

Anyone know how to force android phone to prompt user for certificate download? We don't experience any problems with iphones. Just select SSID , enter active directory user ID, enter password and it will prompt for certificate download. Once download and installed phone connects.... The only way I have been able to get android device to connect is save the certificate on onedrive and download it from there. I then select SSID, mschap2, enter AD id and password, select certificate and I  login. Thanks

[Saurav Lodh]

Provisioning for Android

Because of security considerations, the Android agent must be downloaded from the Android marketplace site and cannot be provisioned from ISE. Cisco uploads a release candidate version of the wizard into the Android marketplace through the Cisco Android marketplace publisher account.

This is the Android provisioning process:

1. Cisco uses the Software Development Kit (SDK) in order to create the Android package with a .apk extension.
2. Cisco uploads a package into the Android marketplace.
3. The user configures the policy in client provisioning with the appropriate parameters.
4. After registration of the device, the end user is redirected to the client provisioning service when dot1x authentication fails.
5. The provisioning portal page provides a button that redirects user to the Android marketplace portal where they can download the SPW.
6. The Cisco SPW is launched and performs provisioning of the supplicant:
   1. SPW discovers the ISE and downloads the profile from ISE.
   2. SPW creates a cert/key pair for EAP-TLS.
   3. SPW makes a Simple Certificate Enrollment Protocol (SCEP) proxy request call to ISE and gets the certificate.
   4. SPW applies the wireless profiles.
   5. SPW triggers re-authentication if the profiles are applied successfully.
   6. SPW exits.

https://play.google.com/store/apps/details?id=com.cisco.cpm.spw.android.wifisupplicant&hl=en