topic ISe Certificate problem in Network Access Control

ISe Certificate problem

antero — Mon, 11 Mar 2019 01:39:37 GMT

i'm installing ISe with certificates, and get a problem when trying to install the certificate.

followyng cisco steps from the book, when do "BIND CA Certificate" to EAP appears a message (as attached) saying that "there is no matching CSR to bind this certificate", when try to management interface only appear an error that "management Certificate must contain teh HOST FQDN in CN component of subjetct field".

I configured the CN correctly as Document said.

Step 3 Create a certificate signing request (CSR)

a. Go to Administration > System > Certificates > Local Certificates, and click

Add

b. Generate a certificate signing request

Attribute Value

Certificate Subject CN=ise-1.demo.local

Key Length 4096

thanks

Antero

ISe Certificate problem

Steve Dussault — Tue, 06 Mar 2012 17:07:09 GMT

Did you ever resolve this? I am getting the same message.

ISe Certificate problem

aman.diwakar — Sat, 17 Mar 2012 00:15:47 GMT

Im seeing the same problem in ISE

ISe Certificate problem

Tarik Admani — Sat, 17 Mar 2012 21:40:41 GMT

Are you using a microsoft CA server? If so are you copying and pasting the output of the CSR using RDP over to the CA? I hit the same issue before and as a workaround i ftp'd the csr file to the CA and copied and pasted it there and generated the cert. (I had to do this since I run a macbook and I can hit the CA page using Mozilla).

ISe Certificate problem

Steve Dussault — Mon, 19 Mar 2012 15:06:48 GMT

In my case I found the issue - the name of the ISE in CLI did not match exactly the name in the CSR. The CSR must match the name of ISE host configured in the CLI.

ISe Certificate problem

aman.diwakar — Tue, 27 Mar 2012 05:38:35 GMT

Same with me, the name is actually case sensitive when creating the CSR.

ISe Certificate problem

Ravi Singh — Thu, 01 Aug 2013 02:44:23 GMT

I also stuck with same issue and later on found that there is problem with ise name in CSR it was not exactly match with ISE. I would suggest you to check the same.

Re: ISe Certificate problem

bikespace — Thu, 01 Aug 2013 21:02:07 GMT

I don't know if its still valid, but there was also a recommendation that the server name should always be lower case. Just thought I'd add that. I'm still sticking to it just in case.

Sent from Cisco Technical Support iPhone App