CISCO ISE error adding third node to deployment

[SupportAC]

Hi,

I need to add a third node to ISE deployment. When i go to PAN to register new node. I introduce FQDN, user, pass but i receive this error: Certificate Signature Verification failed CN= Company1 CAROOT, DC=Company1, DC=com: FQDN

I verified that the CAROOT and CA intermediate are in PAN and new node. How can i fix the issue? any idea?

[aleabrahao]

The FQDN you enter in the PAN must be exactly the same as the one in the new node's certificate.

This means it must match the CN or one of the SAN entries.

If there is no character-by-character match, ISE will reject it with this error.

Verification on the new node via CLI:

show crypto pki certificates ISE

Or GUI:
Administration > System > Certificates > System Certificates

Check the CN/SAN and confirm that it matches the FQDN you are using.