cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2975
Views
6
Helpful
1
Replies

Expected Behavior on EST Service

Jatin Katyal
Cisco Employee
Cisco Employee

hello team,

I'd like to know what should be a status of EST service for P-PAN, S-PAN, PSN and MNT if "Certificate Authority" is enabled for the deployment on the P-PAN.  So far I haven't seen any documentation that talks about it. My understanding is, EST and CA services should be running on all the nodes except MNT.

The only way I know to verify this is, root into /opt/CSCOcpm/config/node-config.rc & check whether ENABLE_CA is 0 or 1. If it is 0 and service is DISABLED then its an expected behavior. I'm looking for a better way to understand this as customer doesn't want to enable root access.

For my customer deployment ISE 2.1 ( Toggling the CA service on PAN didn't help)

S-PAN : CA and EST running

P-PAN : CA and EST Disabled.

Regards,

JK

~Jatin
1 Accepted Solution

Accepted Solutions

hslai
Cisco Employee
Cisco Employee

I believe it only needed on PSNs, per CSCvi69789. Let's confirm it with the dev team.

View solution in original post

1 Reply 1

hslai
Cisco Employee
Cisco Employee

I believe it only needed on PSNs, per CSCvi69789. Let's confirm it with the dev team.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: