Untrusted TLS/SSL server X.509 certificate- ISE

[st92]

When a Vulnerability scanner is run in a network then it shows this vulnerability. Any idea how to resolve this?

[hslai]

Usually the scanner report would provide some recommendations.

This is not necessarily a vulnerability. A fresh install ISE has a self-signed certificate and we may easily replace it with a certificate signed by a well-known CA. See How To: Implement ISE Server-Side Certificates