topic Re: Admin Cert in multinode deployment in Network Access Control https://community.cisco.com/t5/network-access-control/admin-cert-in-multinode-deployment/m-p/4391261#M566824 <P>I would suggest generating a single CSR with all your nodes as SANs, and have that signed by the internal PKI so that it can be installed on all six nodes. This keeps it clean and easy.&nbsp;<BR /><BR />The relevant cert contents would look like this where the CN and first SAN are just a friendly name, and the remaining six are the FQDNs of the nodes.&nbsp;<BR /><BR />CN: ise.yourdomain.com&nbsp;<BR />SAN: ise.yourdomain.com<BR />SAN: pan1.yourdomain.com</P> <P>SAN: pan2.yourdomain.com</P> <P>SAN: psn1.yourdomain.com</P> <P>SAN: psn2.yourdomain.com</P> <P>SAN: psn3.yourdomain.com</P> <P>SAN: psn4.yourdomain.com</P> Thu, 22 Apr 2021 06:30:32 GMT Damien Miller 2021-04-22T06:30:32Z Admin Cert in multinode deployment https://community.cisco.com/t5/network-access-control/admin-cert-in-multinode-deployment/m-p/4391247#M566823 <P>Hello,&nbsp;</P><P>&nbsp;</P><P>I have ISE 2.6 with 2 PAN and 4 PSN</P><P>I would like to change the admin certificate from the default self signed to one form my PKI.</P><P>&nbsp;</P><P>When I change it there will be a restart on the node right?</P><P>Is it advisable to change it on the PSN also?</P><P>&nbsp;</P><P>Thanks and regards,&nbsp;</P><P>Konstantinos</P> Thu, 22 Apr 2021 06:08:23 GMT https://community.cisco.com/t5/network-access-control/admin-cert-in-multinode-deployment/m-p/4391247#M566823 kostasthedelegate 2021-04-22T06:08:23Z Re: Admin Cert in multinode deployment https://community.cisco.com/t5/network-access-control/admin-cert-in-multinode-deployment/m-p/4391261#M566824 <P>I would suggest generating a single CSR with all your nodes as SANs, and have that signed by the internal PKI so that it can be installed on all six nodes. This keeps it clean and easy.&nbsp;<BR /><BR />The relevant cert contents would look like this where the CN and first SAN are just a friendly name, and the remaining six are the FQDNs of the nodes.&nbsp;<BR /><BR />CN: ise.yourdomain.com&nbsp;<BR />SAN: ise.yourdomain.com<BR />SAN: pan1.yourdomain.com</P> <P>SAN: pan2.yourdomain.com</P> <P>SAN: psn1.yourdomain.com</P> <P>SAN: psn2.yourdomain.com</P> <P>SAN: psn3.yourdomain.com</P> <P>SAN: psn4.yourdomain.com</P> Thu, 22 Apr 2021 06:30:32 GMT https://community.cisco.com/t5/network-access-control/admin-cert-in-multinode-deployment/m-p/4391261#M566824 Damien Miller 2021-04-22T06:30:32Z