topic Re:ISE with two PKI enterprise servers in Network Access Control https://community.cisco.com/t5/network-access-control/ise-with-two-pki-enterprise-servers/m-p/2420011#M88709 <HTML><HEAD></HEAD><BODY><P>The reason I asked if both pki groups trusted on another is because of certificate validation. ISE only allows you to use 1 certificate for the eap interface and will need to be trusted for both groups.<BR /><BR />Sent from Cisco Technical Support Android App</P></BODY></HTML> Sat, 18 Jan 2014 18:19:54 GMT Tarik Admani 2014-01-18T18:19:54Z ISE with two PKI enterprise servers https://community.cisco.com/t5/network-access-control/ise-with-two-pki-enterprise-servers/m-p/2420008#M88699 <P>Hi,</P><P></P><P>I have to install Cisco ISE for one of my customer.</P><P>this customer has two enterprise PKI.</P><P>one PKI deliver a certificate for a group of user and the second PKI deliver a certificate for the others user.</P><P>In this case how to do? do have need to add the two enterprise pki certificate in each Cisco ISE? the ISE need to have </P><P>two certificates one from each PKI server?</P><P>what I have already done is to configure cisco ISE with only one enterprise PKI.</P><P></P><P>Guy charles</P> Mon, 11 Mar 2019 04:17:18 GMT https://community.cisco.com/t5/network-access-control/ise-with-two-pki-enterprise-servers/m-p/2420008#M88699 guycharleskouakou 2019-03-11T04:17:18Z Re:ISE with two PKI enterprise servers https://community.cisco.com/t5/network-access-control/ise-with-two-pki-enterprise-servers/m-p/2420009#M88704 <HTML><HEAD></HEAD><BODY><P>Do both users group trust each of the enterprise CA certs?<BR /><BR />Are the two user groups in the same ad environment and are you planning on differentiated access based on AD groups?<BR /><BR />Also you will need to import the root and intermendiate CA from both environments and select trust for client authentication.<BR /><BR /><BR />Sent from Cisco Technical Support Android App</P></BODY></HTML> Thu, 16 Jan 2014 13:17:44 GMT https://community.cisco.com/t5/network-access-control/ise-with-two-pki-enterprise-servers/m-p/2420009#M88704 Tarik Admani 2014-01-16T13:17:44Z ISE with two PKI enterprise servers https://community.cisco.com/t5/network-access-control/ise-with-two-pki-enterprise-servers/m-p/2420010#M88707 <HTML><HEAD></HEAD><BODY><P>Do both users group trust each of the enterprise CA certs?</P><P></P><P>No, but I can ask to the customer to do it if it is a right solution.</P><P></P><P>Are the two user groups in the same ad environment and are you planning on differentiated access based on AD groups?</P><P></P><P>the two user groups are in the same ad environment, yes i am planning to do access based on ad groups.</P></BODY></HTML> Thu, 16 Jan 2014 18:24:11 GMT https://community.cisco.com/t5/network-access-control/ise-with-two-pki-enterprise-servers/m-p/2420010#M88707 guycharleskouakou 2014-01-16T18:24:11Z Re:ISE with two PKI enterprise servers https://community.cisco.com/t5/network-access-control/ise-with-two-pki-enterprise-servers/m-p/2420011#M88709 <HTML><HEAD></HEAD><BODY><P>The reason I asked if both pki groups trusted on another is because of certificate validation. ISE only allows you to use 1 certificate for the eap interface and will need to be trusted for both groups.<BR /><BR />Sent from Cisco Technical Support Android App</P></BODY></HTML> Sat, 18 Jan 2014 18:19:54 GMT https://community.cisco.com/t5/network-access-control/ise-with-two-pki-enterprise-servers/m-p/2420011#M88709 Tarik Admani 2014-01-18T18:19:54Z