topic Re: ISE API - can default internal CA key size be changed? in Network Security https://community.cisco.com/t5/network-security/ise-api-can-default-internal-ca-key-size-be-changed/m-p/3469114#M195 <HTML><HEAD></HEAD><BODY><P>it does not appear to be an option as of ISE 2.3:</P><P><IMG __jive_id="112499" alt="" class="image-1 jive-image" src="https://community.cisco.com/legacyfs/online/fusion/112499_pastedImage_0.png" style="max-width: 1200px; max-height: 900px;" /></P><P></P><P>I will submit this suggestion to the PM.</P></BODY></HTML> Wed, 25 Oct 2017 00:40:17 GMT thomas 2017-10-25T00:40:17Z ISE API - can default internal CA key size be changed? https://community.cisco.com/t5/network-security/ise-api-can-default-internal-ca-key-size-be-changed/m-p/3469113#M194 <HTML><HEAD></HEAD><BODY><P>I have used the End Points Certificate to successfully get a cert plus key, however the default root CA used to generate the client certificate (Certificate Services Endpoint Sub CA) has a key length of 4096 bits. Unfortunately our devices have a 2048-bit key limit on loaded certs - since we are using EAP-TLS the devices need to be loaded with both root cert and client cert. Is it possible to change the default root cert used to generate the client cert from the API POST call??</P></BODY></HTML> Thu, 28 Sep 2017 21:58:29 GMT https://community.cisco.com/t5/network-security/ise-api-can-default-internal-ca-key-size-be-changed/m-p/3469113#M194 kpeters011 2017-09-28T21:58:29Z Re: ISE API - can default internal CA key size be changed? https://community.cisco.com/t5/network-security/ise-api-can-default-internal-ca-key-size-be-changed/m-p/3469114#M195 <HTML><HEAD></HEAD><BODY><P>it does not appear to be an option as of ISE 2.3:</P><P><IMG __jive_id="112499" alt="" class="image-1 jive-image" src="https://community.cisco.com/legacyfs/online/fusion/112499_pastedImage_0.png" style="max-width: 1200px; max-height: 900px;" /></P><P></P><P>I will submit this suggestion to the PM.</P></BODY></HTML> Wed, 25 Oct 2017 00:40:17 GMT https://community.cisco.com/t5/network-security/ise-api-can-default-internal-ca-key-size-be-changed/m-p/3469114#M195 thomas 2017-10-25T00:40:17Z