What is used by the Certificate Authority to issue a certificate to an endpoint?

A certificate template defines the properties and usage parameters applied when the Cisco ISE Internal Certificate Authority issues an endpoint certificate. The template specifies information such as the certificate’s validity period, key usage, extended key usage, subject fields, Subject Alternative Name construction, key length, and intended authentication purpose. During a BYOD or certificate-provisioning workflow, ISE uses the selected template to generate and issue a certificate that conforms to the organization’s requirements. The Certificate Provisioning Portal provides an administrative or user-facing mechanism for requesting certificates, but it is not the object that defines the certificate issued by the CA. A network address is not sufficient to establish certificate attributes, and a device unique identifier may be inserted into a certificate field but does not replace the certificate template used by the issuing CA.