CIsco ISE use two different local certificates for EAP

[andreagentile71]

Hi Experts,

ISE 1.2.1.198

It is possible to use two different local certificates on cisco ISE, generated by two different root CA, for EAP?

Example:

1 - Microsoft CA for notebooks

2 - Different CA (public, openssl, other) for mobiles

And, in case it is possible, which will be the first one presented from the server to the client for EAP-TLS authentication?

Thanks

Andrea

[Venkatesh Attuluri]

You can install several certificates to ISE  but you can only mark one certificate for EAP usage

[andreagentile71]

Thanks for your reply,

i think i'll go for another pair of PSN for the mobiles

Andrea