A network engineer is configuring a portal on Cisco ISE for employees.

The Bring Your Own Device portal is the onboarding portal used when employees register personal endpoints and provision native supplicants. During the BYOD workflow, Cisco ISE authenticates the employee, registers the endpoint, provisions the operating system’s native 802.1X supplicant, and can obtain an endpoint certificate from the Cisco ISE internal Certificate Authority. The resulting certificate and supplicant profile allow the device to reconnect securely to the corporate WLAN or wired network using certificate-based authentication. The Client Provisioning Portal primarily distributes software such as Cisco Secure Client and posture components. The My Devices portal allows users to view, manage, or report previously registered devices as lost, stolen, or reinstated; it is not the primary onboarding interface. “Personal Device portal” is not the appropriate Cisco ISE portal type for the native-supplicant BYOD registration and internal-CA certificate workflow described.