Cisco ISE Export API gives "HostName should not be null"

[prathwishhegde]

HI, 

We are using Cisco ISE (version 3.1.0.518, multi-node) for certificate lifecycle management. We encountered an issue in the following use case:

When attempting to export a certificate using the API shared below, it works successfully on one machine. However, it fails on one of our customer machines running the same version, with the error shown below.

{
"status" : "Fail",
"message" : "HostName should not be null"
}

API: https://{IP/FQDN}:443/api/v1/certs/system-certificate/export

{

"export":"CERTIFICATE",

"id":"SYSTEM_CERT_ID,

"password":"RANDOMPASSWORD"

}

https://www.postman.com/lunar-module-astronomer-52086722/cisco-ise/request/touub2z/purpose-of-the-api-is-to-export-a-system-certificate-given-a-certificate-id

In the below doc, it says hostname is mandatory.

https://developer.cisco.com/docs/identity-services-engine/latest/certificate-openapi/

Could you please help us understand under what condition this hostname is mandatory in the payload? 

[marce1000]

          - FYI : https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwh17862

  M.

[prathwishhegde]

Thanks for sharing the details @marce1000 . However, it says as a "Workaround: Add a "hostName" field in the request body. This hostname must match the node hostname from which the certificate needs to be exported."

but why 2 different behavior in the same version in 2 different ISE node.