09-15-2023 03:56 PM
Cannot establish trust with Cisco ISE: Expected phrase [Trust establishment completed successfully] wasn't received from ise.
DNAC is using a self signed cert with both of its VIP and cluster IP in the SAN field with the extended parameters.
ISE is using the default certificates of pxgrid signed by its intermediate and root CA.
-> I've imported both of these - the intermediate and root certs into DNAC's trustpool.
Do I also need to import DNAC's certificate into ISE's trustpool?
I do not have a dedicated PKI and I am going in circles trying to get this trust established. Any help would be much appreciated.
09-15-2023 04:41 PM
I've regenerated the self signed certificate of DNAC with CA constraints and now I am past the errors. However - I do not see any acti
Any help would be much appreciated. Thank you.
ve requests in ISE.
09-15-2023 08:30 PM
did you follow the steps here
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide