topic You're welcome - thanks for in Network Access Control

Import PKCS#7 Certificate into Cisco ISE 2.2

Kakou Kouassi Victor — Mon, 11 Mar 2019 07:53:13 GMT

Hello All,

I have to importe CA and PKCS certificate generate by DC Administrator into my Cisco ISE 2.2. I used to importe .cer certificate to do that, but this time the administrator gave me two certificate: the CA certificate is in .cer format, that's ok, but the second certificate is in .p7b format. Somebody can help me to importe that certificate to my CSR ? Thank you.

The PKCS#7 certificate has

Marvin Rhoads — Mon, 24 Jul 2017 15:43:52 GMT

The PKCS#7 certificate has been transformed by Base64 encoding ASCII file.

You cannot import it directly into ISE - you have to first transform it into a compatible PEM format. For that you can use openssl as follows:

$ openssl pkcs7 -print_certs -in certificate.p7b -out certificate.cer

(Substitute "certificate.p7b" with your .p7b filename and "certificate.cer" with a certificate filename of your choice.)

Hello MR Marvin

Kakou Kouassi Victor — Wed, 02 Aug 2017 10:33:26 GMT

Hello MR Marvin

Your answer is correct, but I did it by using Windows GUI to extract .p7b certificate into .cer. Thank you for your help.

You're welcome - thanks for

Marvin Rhoads — Wed, 02 Aug 2017 10:36:39 GMT

You're welcome - thanks for rating.

As with most things certificate-related (or engineering-related), there's usually more than one way to achieve your goal.

By the way, consider moving up to ISE 2.3 - it's really quite a nice upgrade.