topic Cisco ISE Mirgration from Appliance to VM in Network Access Control

Cisco ISE Mirgration from Appliance to VM

dina.chaal@cbi.ma — Wed, 02 Oct 2019 15:28:01 GMT

Hello Guys,

I have Two nodes of cisco ISE Version 2.4 installed on a SNS 3415, and we want to replace Appliances by VMs, with same configuration.

VMs are having different Hostname, the import of certificates failed.

Should i create new certificates ?

Can someone please give me the action plan that i should follow ?

Many thanks

Re: Cisco ISE Mirgration from Appliance to VM

Mike.Cifelli — Wed, 02 Oct 2019 17:04:47 GMT

Since the common names are going to change you will need to create new certificates and bind them to the respective services. Note that if your certificate chain changes your end nodes will need to import the new chain so that your new ISE certs are trusted accordingly. Also, keep in mind that binding of a new cert to certain services will trigger an application reload. Good luck & HTH!

Re: Cisco ISE Mirgration from Appliance to VM

dina.chaal@cbi.ma — Wed, 02 Oct 2019 23:25:50 GMT

Thank you mike .

We don't want to change the certificats, so we have to keep the same hostname.

So we think to remove the secondary node, replace it with a VMs which will have the same hostname, so we won't have any changes in the certificats, then to the same to the primary node, do you think it will create any problem ?

Regards

Re: Cisco ISE Mirgration from Appliance to VM

Mike.Cifelli — Thu, 03 Oct 2019 12:28:26 GMT

One way to accomplish what you want to do is to backup your configuration from the current nodes, and import the configuration on the new VMs. Make sure if you plan to retain your existing certs that you export the certificate along with the private key. Then after you import your config to the new VM, import the cert + priv key. Good luck & HTH!