Digital Certificates in ISE with different domain

[jitendrac]

Hi,

Can digital certificate deployment be possible in different domains?

Example 

Let say we want to use Model 1: Single Certificate per Node. Used for all Services (How To Implement Digital Certificates in ISE - Cisco Community) 

• PAN has Certificate Subject CN as ppan.example.com 
• one PSN has Certificate Subject CN as psn1.example.com and Subject Alternative Name for guest portal as guest.example.com

We want to introduce one more PSN in another domain (other.net ) with all necessary DNS entry for other.net and example.com. 

can we have other PSN having Certificate Subject CN as psn2.other.net and Subject Alternative Name for guest portal as guest.example.com ?

[ahollifield]

Not sure I am following 100% but I think what you are describing should work just fine.  It would be much better though to have a guest only PSN in A DMZ.  Rather than allow guests to talk to the ISE portal over the internal network.