DNAC, ISE integration design help

[M_alamin]

Hi,

we had situation where two nodes PAN,MNT must be installed on the cloud and two nodes PSN must be installed on prem, catalyst center (DNAC) installed on prem as well and we want to make integration with DNAC and ISE, question where we should enable pxgrid should we enable it on the cloud along with PAN, MNT only or along with PSN on prem only or enable it on all the nodes?

also we want to have wildcard certificate for PAN, EAP, Portal but as per my understanding its not allowed for pxgrid can i use internal PKI for pxgrid and if there any reference for pxgrid certificate creation since certificate should include both servcer and client ?

thanks

[marce1000]

          - FYI : https://community.cisco.com/t5/networking-knowledge-base/how-to-cisco-dna-center-ise-integration/ta-p/3896410

   M.