ISE PxGrid and DNA Center

[SecurityEng99]

Does Cisco ISE use the "Admin" certificate to connect to DNA Center  ? not the PxGrid certificate ?

What is the different between PxGrid Server and Client certificates ?

[balaji.bandi]

here is the process : ( ISE and DNAC are integrated is via ERS and pxGrid)

 check below thread :

https://community.cisco.com/t5/cisco-software-discussions/ise-3-2-connecting-to-dnac-2-3-3-6-pxgrid-certificates/td-p/4788325

Good video explain :

https://www.youtube.com/watch?v=dKy9SYo0LvA

[SecurityEng99]

Thanks for the information, but my question is about that ISE using "Admin" certificate to connect to the DNA Center. So what is PxGrid certificate is used for ?

[Gaur Samal · Accepted solution]

The Pxgrid cert is used to modify/create/delete Pxgrid subscriptions via ERS config API’s.
As part of ISE integration workflow, Catalyst Center would check if any existing Pxgrid subscribers are present ( via Pxgrid ERS API) and delete them. After this, it will create Pxgrid subscription via Pxgrid ERS API.
For any ERS Pxgrid API, Pxgrid certs are used for validation.