topic Cisco ISE CSR in Network Access Control

Cisco ISE CSR

Arjun176 — Mon, 25 Nov 2019 10:58:49 GMT

hi,

I tried to create CSR for system certificate, it is generated in the ISE but am unable to download the file, ISE keeps giving me a error unable to connect ISE Node(Same node with hostname).

i tried to re generate the certificate it is giving me a error CSR with the same friendly name already exists.

I tried to delete the CSR which was generated, It is giving me the same error as unable to connect to ISE node(same node).

Is it is a issue with the DNS resolution or the ports issue on firewall. Please suggest.

regards

Arjun.S

Re: Cisco ISE CSR

Mike.Cifelli — Mon, 25 Nov 2019 14:31:11 GMT

i tried to re generate the certificate it is giving me a error CSR with the same friendly name already exists.
-Try tweaking one of the attribute strings to make the CSR unique. For example, O, OU, or city.

Re: Cisco ISE CSR

Arne Bier — Fri, 29 Nov 2019 01:32:39 GMT

I have never been unable to Export/Download a CSR from an ISE node. It appears that ISE does this within the TLS (TCP/443) connection between the client and the PAN node. If you can browse to the ISE PAN, then you should also be able to download the CSR. Maybe it's a browser issue?