Cisco ISE CSR

[Arjun176]

hi,

I tried to create CSR for system certificate, it is generated in the ISE but am unable to download the file, ISE keeps giving me a error unable to connect ISE Node(Same node with hostname).

i tried to re generate the certificate it is giving me a error CSR with the same friendly name already exists. 

I tried to delete the CSR which was generated, It is giving me the same error as unable to connect to ISE node(same node).

Is it is a issue with the DNS resolution or the ports issue on firewall. Please suggest. 

regards

Arjun.S

[Mike.Cifelli]

i tried to re generate the certificate it is giving me a error CSR with the same friendly name already exists.
-Try tweaking one of the attribute strings to make the CSR unique. For example, O, OU, or city.

[Arne Bier]

I have never been unable to Export/Download a CSR from an ISE node. It appears that ISE does this within the TLS (TCP/443) connection between the client and the PAN node. If you can browse to the ISE PAN, then you should also be able to download the CSR. Maybe it's a browser issue?