Cisco ISE "CA Server is down"

[oumodom]

Dear Team, 

Currently, we get the alarm on cisco ISE message

Description CA Server is down
Suggested Actions Please check to make sure the CA services are up and running on the CA server.

While we all identify functionality of ISE, there is no any affect part.
As healthy, Deployment Node, and External identity are working well with AD. 

Please let me know if there is the normal bug and how to fix it?

Cisco ISE v3.1 Deployment Node running the same box. 

[oumodom]

@Leo Laohoo @Arne Bier Do you have any idea on this matter? 

[Marcelo Morais]

Hi @oumodom ,

 at Administration > System > Certificates > Certificate Authority > Internal CA Settings, check if the Certificate Authority is enabled:

double check the info at ISE PSN CLI:

ise/admin# show application status ise

ISE PROCESS NAME                STATE     PROCESS ID 
----------------------------------------------------
...
Certificate Authority Service   running   26507 
...

Hope this helps !!!

[oumodom]

So, if is enable as you suggested which meant working well on CA-server ? 

[Marcelo Morais]

Hi @oumodom ,

 yes, one of the uses of an enabled Certificate Authority is to generate Certificate Signing Requests (CSR) (please take a look at ISE - Queue Link Error > search for Certificate Authority).

Hope this helps !!!

[oumodom]

Hi @Marcelo Morais 
We have followed through all even CLI clarify on ISE Message service as enable as normal. 
From yesterday until now, we have met CA Server is down alerts in 2 times. 

Any more idea on this alarm still persists ?

[Marcelo Morais · Accepted solution]

Hi @oumodom ,

 in other words, you have a Certificate Authority enabled (ISE GUI) and also a Certificate Authority Service running on all PSNs (ISE CLI) ... looks like Bug ID: CSCuz86154 Alarms:CA Sever is down.

Please:

1st disable and enable the Certificate Authority (Administration > System > Certificates > Certificate Authority > Internal CA Settings) ... maybe the Alarm will go away !!!   :  )

2nd reboot/reload the Nodes and see what happens.

Hope this helps !!!

[oumodom]

Appreciate your support with precise action @Marcelo Morais . 
Let us keep posted for status. 

[oumodom]

During the monitoring within 3-4 days, we can't find this alert emerges. 

I think it is the bug on Cisco v3.1 @Marcelo Morais 

[Marcelo Morais]

Excellent news @oumodom !!!