Lab Minutes Forum

Technical Discussion => Security => Topic started by: abhisheksha on May 21, 2014, 12:36:51 AM

Title: Cisco ISE BYOD onboarding issue
Post by: abhisheksha on May 21, 2014, 12:36:51 AM
Hi,

I'm running on Cisco ISE 1.2. I'm trying to setup BYOD (Single SSID). I've followed your videos, and I've setup the policies and SCEP and stuff.

Here's a walkthrough of what's happening:

1. I connect to the corporate SSID. Enter my username and password.
2. This certificate gets pushed first:

(http://i62.tinypic.com/19xhyb.png)

3. I accept the cert, and I'm connected to the SSID.


4. I get redirected to the URL for the mydevices portal. The MAC is already filled. I add a description.

(http://i61.tinypic.com/2rh66wm.png)


5. Then I get the Profile.

(http://i62.tinypic.com/2ikzi1x.png)

6. I install the profile, and I get this error.

(http://i61.tinypic.com/2ensxa1.png)




So.. why is this happening?

ALSO, on the basis of this, can you please let me know if my SCEP is configured correctly? Is SCEP working?
Title: Re: Cisco ISE BYOD onboarding issue
Post by: MC on May 21, 2014, 07:53:57 AM
Look like there is something on the server cert the client didn't like. I personally never come across this error before. If you are using the self-signed cert, try to use a CA-signed cert and check that the cert gets added under the device Profile. Although it hasn't really gotten to the SCEP part yet, use a router or ASA to test the SCEP and make sure you can pull a cert to make sure your SCEP setup is working.
SimplePortal 2.3.7 © 2008-2024, SimplePortal