topic Re: setting certificate authentication to ssh connect to admin panel in Network Access Control

setting certificate authentication to ssh connect to admin panel

maladi — Sat, 18 Aug 2018 15:57:32 GMT

Hello,

How can I set a certificate authentication to admin user who connect with ssh to ise administrator panel?

Thank you

Re: setting certificate authentication to ssh connect to admin panel

RichardAtkin — Sun, 19 Aug 2018 11:58:16 GMT

1. Create a Certificate Authentication Profile (under external identity sources) for the Certs

2. Go to Administration > System > Admin Access > Authentication > Authentication Method

3. Select Certificate Based

4. Reference the Cert Auth Profile you made in step 1.

5. Reference your AD as the Identity Store (for later group lookups so you can have different types of admin, presuming the CN on the Cert = an AD User Account)

6. Associate Admin Groups with specific AD Groups

7. Done.

Re: setting certificate authentication to ssh connect to admin panel

RichardAtkin — Sun, 19 Aug 2018 11:59:53 GMT

Oops... RTFQ!

That applies only to the Web GUI. SSH is Username / Password only.

Re: setting certificate authentication to ssh connect to admin panel

RichardAtkin — Mon, 20 Aug 2018 19:47:15 GMT

Looks like it is possible - see here.

https://community.cisco.com/t5/identity-services-engine-ise/setting-certificate-to-admin-s-ssh/m-p/3690882

Rich