My network guy says ISE is not checking for AD objects.
I have a screenshot of a list of certificates within ISE. The blue highlighted certs are the ones I have installed on the ThinPC. It’s the issuing and the root. (My root was from SCEP but they look the same to me). The issuing was copied straight from ISE.
Also note, I’ve been testing these settings on the local ThinPC but I do have WMS set to install certs automatically.
