Changing the domain name on Cisco ISE 2.4

[KiranSS74664]

Hi Guys,

We have 4 node distributed ISE 2.4 deployment (2 PAN + 2 PSN) and these are in production used for device authentication & wireless authentication. For various reasons we have to change the domain name on the ISE. 

1. Is there a way to change the domain name on all 4 nodes.

2. What could be the implications of changing the domain name.

The ISE uses self-signed certificate & going forward we want to register with CA server.

Thanks,

Kiran

[Aref Alsouqi]

To change the domain name on ISE I think you need to take each node out of the deployment, make it a standalone node, and then apply the command ip domain-name from CLI. This change would imply reassigning the certificates to the features, since the certificates would be tied to the domain name.

[KiranSS74664]

Thanks Aref for the reply. Do you see any other impact on system functionality based on our deployment.

[Aref Alsouqi]

You welcome. I don't think there will be any. As long as the new certs and the DNS records on your AD are in place you should be good to go.