What should be taken into account when configuring certificates for BYOD?
In Cisco ISE BYOD certificate enrollment, Android uses the Enrollment over Secure Transport (EST) path, whereas other operating-system enrollment flows use Simple Certificate Enrollment Protocol (SCEP). Cisco ISE uses the username as the endpoint certificate Common Name and binds the endpoint MAC address in the SAN, rather than placing the username in the SAN or the hostname in the CN.
Community Discussion