Part 1 can be found here.
Create a redirect ACL on the Cisco 9800
Configure the Guest Portal
The guest portal will be referenced in the “authorization” policy results and trigger the captive portal.
Configure the Policy Results
Create a certificate profile.
Create an identity source sequence.
Configure the client provisioning settings.
Configure the retry URL
In Cisco Identity Services Engine (ISE), you can create and manage certificate templates for the internal Certificate Authority (CA). These templates define how certificates are issued, including details like key length, expiration, subject name, and certificate extensions.