topic Re: After Code Upgrade to 3.1 CA Service Shows Disabled in Network Access Control

After Code Upgrade to 3.1 CA Service Shows Disabled

MSJ1 — Wed, 26 Oct 2022 13:18:58 GMT

After Code Upgrade to 3.1 CA Service Shows Disabled. Service is working fine. Is it normal to be Disabled ? in version 3.1 ? Version upgraded from 2.7 to 3.1.

ISE01/admin# show application status ise

ISE PROCESS NAME STATE PROCESS ID

--------------------------------------------------------------------

Database Listener running 83841

Database Server running 82 PROCESSES

Application Server running 3498195

Profiler Database running 90186

ISE Indexing Engine running 3475161

AD Connector running 116613

M&T Session Database running 3474548

M&T Log Processor running 3475556

Certificate Authority Service disabled

EST Service disabled

Re: After Code Upgrade to 3.1 CA Service Shows Disabled

Greg Gibbs — Wed, 26 Oct 2022 20:37:55 GMT

These services are running on all of the clean 3.1 installs I've seen. I have not yet done a direct upgrade from 2.7 to 3.1, but maybe someone else can comment that has done that.

What does the status look like in the GUI on the Administration > System > Certificates > Certificate Authority > Internal CA Settings page?

After the upgrade did you complete all of the Post-Upgrade tasks as documented in the Upgrade Journey Guide , including regenerating the Root CA Chain?

Re: After Code Upgrade to 3.1 CA Service Shows Disabled

thomas — Fri, 11 Nov 2022 22:03:18 GMT

Did you reboot/reload ISE and see what happens?

Re: After Code Upgrade to 3.1 CA Service Shows Disabled

hslai — Tue, 15 Nov 2022 02:34:34 GMT

If the two services were enabled before upgrade, they are expected to be enabled after. These services are only required for BYOD so need not be enabled for all ISE nodes.