06-15-2018 02:19 PM
hello team,
I'd like to know what should be a status of EST service for P-PAN, S-PAN, PSN and MNT if "Certificate Authority" is enabled for the deployment on the P-PAN. So far I haven't seen any documentation that talks about it. My understanding is, EST and CA services should be running on all the nodes except MNT.
The only way I know to verify this is, root into /opt/CSCOcpm/config/node-config.rc & check whether ENABLE_CA is 0 or 1. If it is 0 and service is DISABLED then its an expected behavior. I'm looking for a better way to understand this as customer doesn't want to enable root access.
For my customer deployment ISE 2.1 ( Toggling the CA service on PAN didn't help)
S-PAN : CA and EST running
P-PAN : CA and EST Disabled.
Regards,
JK
Solved! Go to Solution.
06-15-2018 02:33 PM
I believe it only needed on PSNs, per CSCvi69789. Let's confirm it with the dev team.
06-15-2018 02:33 PM
I believe it only needed on PSNs, per CSCvi69789. Let's confirm it with the dev team.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: