After Code Upgrade to 3.1 CA Service Shows Disabled

[MSJ1]

After Code Upgrade to 3.1 CA Service Shows Disabled. Service is working fine. Is it normal to be Disabled  ? in version 3.1 ? Version upgraded from 2.7 to 3.1.

ISE01/admin# show application status ise

ISE PROCESS NAME                       STATE            PROCESS ID

--------------------------------------------------------------------

Database Listener                      running          83841

Database Server                        running          82 PROCESSES

Application Server                     running          3498195

Profiler Database                      running          90186

ISE Indexing Engine                    running          3475161

AD Connector                           running          116613

M&T Session Database                   running          3474548

M&T Log Processor                      running          3475556

Certificate Authority Service          disabled

EST Service                            disabled

[Greg Gibbs]

These services are running on all of the clean 3.1 installs I've seen. I have not yet done a direct upgrade from 2.7 to 3.1, but maybe someone else can comment that has done that.

What does the status look like in the GUI on the Administration > System > Certificates > Certificate Authority > Internal CA Settings page?

After the upgrade did you complete all of the Post-Upgrade tasks as documented in the Upgrade Journey Guide , including regenerating the Root CA Chain?

[thomas]

Did you reboot/reload ISE and see what happens?

[hslai]

If the two services were enabled before upgrade, they are expected to be enabled after. These services are only required for BYOD so need not be enabled for all ISE nodes.