topic Re: error message "EST Service not running" since upgrade to 2.4 in Network Access Control

error message "EST Service not running" since upgrade to 2.4

John Vierra — Mon, 02 Apr 2018 15:08:33 GMT

Ever since I upgrade to 2.4 I'm getting this error message "EST Service not running". If I look in the CLI is says its not running. Any ideas?

Re: error message "EST Service not running" since upgrade to 2.4

hslai — Mon, 02 Apr 2018 15:17:28 GMT

I already responded and suggested to meet and check this out.

Re: error message "EST Service not running" since upgrade to 2.4

chhess — Sat, 25 Aug 2018 16:49:39 GMT

Hello, i am having this same issue. I see this is marked as "Solved" but there is not any information on what fixed this issue. Is this the same bug as CSCvj11319, we upgraded from 2.2.

Re: error message "EST Service not running" since upgrade to 2.4

hslai — Mon, 27 Aug 2018 13:31:16 GMT

Yes, it's the same issue as CSCvj11319.

In John's case, he re-generated the ISE internal CA certificate chain.

Re: error message "EST Service not running" since upgrade to 2.4

chhess — Tue, 04 Sep 2018 22:51:42 GMT

Thank you for the information!

Re: error message "EST Service not running" since upgrade to 2.4

Damien Miller — Tue, 04 Sep 2018 23:52:40 GMT

for others that may find this, I would do this after the entire deployment has been upgraded, not just the after the PAN completes.

Re: error message "EST Service not running" since upgrade to 2.4

kangkungkok — Wed, 19 Sep 2018 01:38:21 GMT

hi hslai

How do I create an ISE internal CA certificate chain?

Re: error message "EST Service not running" since upgrade to 2.4

Damien Miller — Wed, 19 Sep 2018 04:46:02 GMT

To fix the EST service not running following an upgrade just follow these screenshots. I suggest engaging TAC if you are have problems or need help though. Make sure you weren't using the existing prior to this, if unsure contact TAC.

Click on Generate CSR highlighted

Then Select "Root CA" and click replace ISE root CA certificate chain.

Re: error message "EST Service not running" since upgrade to 2.4

anil.kumark — Tue, 30 Apr 2019 10:59:51 GMT

We tried this workaround in from CSCvj11319 bug but no luck. We are not using internal CA.

Re: error message "EST Service not running" since upgrade to 2.4

Jason Kunst — Tue, 30 Apr 2019 12:25:17 GMT

Open a tac case
More information about getting help under resources http://cs.co/ise-help

Re: error message "EST Service not running" since upgrade to 2.4

csco10979295 — Mon, 02 Sep 2019 07:36:44 GMT

Is there anyway to disable EST services only ?

Re: error message "EST Service not running" since upgrade to 2.4

m.soleimani — Sun, 06 Sep 2020 05:39:03 GMT

Hi Dear Damien Miller

I have the same problem on one of my PSN and I did your solution but it didn't work for me, any help?

Re: error message "EST Service not running" since upgrade to 2.4

Damien Miller — Sun, 06 Sep 2020 06:06:35 GMT

I would reccomend contacting TAC if the process did not work. I have run in to issues since this thread where a cert db file may need to be cleared out from root.