What must be configured within Cisco ISE to accomplish this goal?

An organization wants to improve their BYOD processes to have Cisco ISE issue certificates to the BYOD endpoints. Currently, they have an active certificate authority and do not want to replace it with Cisco ISE .

What must be configured within Cisco ISE to accomplish this goal?
A . Create a certificate signing request and have the root certificate authority sign it.
B. Add the root certificate authority to the trust store and enable it for authentication.
C. Create an SCEP profile to link Cisco ISE with the root certificate authority.
D. Add an OCSP profile and configure the root certificate authority as secondary.

View Answer

Answer: C

Explanation:

Ref: https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-software/116068-configure-product-00.html