topic Secondary ISE cannot join the primary node with error message in Network Access Control

Secondary ISE cannot join the primary node with error message

Mountain Man — Mon, 11 Mar 2019 02:26:21 GMT

Hi,

I have just installed the secondary ISE and did the followings, but when I try to join the primary node, I received the Cannot authenticate the primary ISE, please check the server or certificate and try again.

- promote the secondary from standalone to primary

- export self cert from the seconary

- import the cert to the primary

- try to add not on the secondary used both IP and host name with super admin user

One thing I have noticed that the instruction on the ISE 1.1.1 import cert on primary section mentioned:

Choose Administration > System > Certificates.

From the Certificate Operations navigation pane on the left, click Certificate Authority Certificates.

but the Certificat Authority Certificates does not exist on the left pane. I choosed Certificate store instead

any suggestions?

Secondary ISE cannot join the primary node with error message

edondurguti — Fri, 17 Aug 2012 15:37:08 GMT

I've seen that order to be different on the cert guide aswell.

Make sure that the admin password matches

Secondary ISE cannot join the primary node with error message

Mountain Man — Fri, 17 Aug 2012 15:39:52 GMT

Yes. Admin password is match. I have also tested to using a different super admin user created on both system. none of them working

Secondary ISE cannot join the primary node with error message

edondurguti — Fri, 17 Aug 2012 15:41:55 GMT

do you have both certs on the primary node as of right now?

if you go to

Administration > System > Certificates

choose Certificate Store

what do you see there?

Re: Secondary ISE cannot join the primary node with error messag

Mountain Man — Fri, 17 Aug 2012 15:44:07 GMT

Yes. I have two certs there, one is local/primary the other one is imported from the secondary

Re: Secondary ISE cannot join the primary node with error messag

edondurguti — Fri, 17 Aug 2012 15:49:45 GMT

I'm sorry, you do or don't see two certs there?

Secondary ISE cannot join the primary node with error message

Mountain Man — Fri, 17 Aug 2012 15:54:10 GMT

I tried to add the cert from primary and imported it into the secondary. Run add note again, get different error:

Unable to register primary_host. Node is not a Standalone node.

Secondary ISE cannot join the primary node with error message

Tarik Admani — Fri, 17 Aug 2012 15:58:17 GMT

Hi,

Did you set the secondary node to primary? You may have tried to register the node in the wrong direction. For a node to register with the primary node, the registration request must be initiated from the primary node.

Thanks,

Tarik Admani
*Please rate helpful posts*

Secondary ISE cannot join the primary node with error message

Mountain Man — Fri, 17 Aug 2012 16:18:17 GMT

Thanks, Tarik: that's It.