Wildcard cert import keeps going into Primary Admin Node System Certs

rcullum — Tue, 10 May 2022 15:29:28 GMT

Hi, This is a v2.7 Patch 7 ISE deployment. I'm trying to import a wildcard cert to use across both my ISE Nodes.in a standard 2 Node deployment. But each time I try and import the Certificate as a wildcard, it 'greys' out the option of choosing between which nodes I want to install the certificate on and keeps adding it only into the Primary Admin Node System Certs list. I want it to go into the Secondary Admin Node System Certs list as well. I want to use if for Portal purposes so it's got to be available on both Nodes.

Re: Wildcard cert import keeps going into Primary Admin Node System C

Karsten Iwen — Tue, 10 May 2022 15:40:03 GMT

To disable the node list is normal, as wildcard-certs always go to all nodes. At least this is how it should work.

I had a TAC case open (also 2.7 but I don't remember which patch) where this also didn't work. The only solution was to remove the problematic node from the deployment and re-add the node. After that I was able to import the wildcard-certificate to both nodes as expected.

topic Re: Wildcard cert import keeps going into Primary Admin Node System C in Network Access Control

Wildcard cert import keeps going into Primary Admin Node System Certs

Re: Wildcard cert import keeps going into Primary Admin Node System C