topic Re: deploy crt for Tacacs+ TLS Based Device Administration throu ISE in Network Access Control

deploy crt for Tacacs+ TLS Based Device Administration throu ISE

MSJ1 — Wed, 15 Oct 2025 23:29:51 GMT

to do Tacacs+ TLS Based Device Administration, need to deploy certificates to devices in PKCS format.

is it possible to deploy the Device cert from DNAC ? If we can use DNAC to push certificates than it would be much easier to import ca signed certs to devices.

Here is the doc link for Tacacs+ TLS based Device Administration.

https://www.cisco.com/c/en/us/support/docs/security-vpn/terminal-access-controller-access-control-system-tacacs-/225097-configure-tacacs-over-tls-1-3-on-an.html

Re: deploy crt for Tacacs+ TLS Based Device Administration throu ISE

Greg Gibbs — Thu, 16 Oct 2025 03:46:23 GMT

This would be a question better posted in the Catalyst Center space - https://community.cisco.com/t5/cisco-catalyst-center/bd-p/discussions-dna

Re: deploy crt for Tacacs+ TLS Based Device Administration throu ISE

MSJ1 — Thu, 16 Oct 2025 11:32:21 GMT

@Greg Gibbs I just did that thank you Greg.