EAP certificate.

[dazza_johnson]

Hey guys, with HTTPS certs in ISE we can use a SINGLE certificate on all ISE nodes and use the SAN field in the certificate to match each ISE nodes hostname. This is good as a single certificate for guest HTTPS sessions across the whole ISE deployment.

My questions is; can you also do this for EAP? In other words, use a single EAP certificate across all ISE nodes and leveraging the SAN fields within the certificate. Not sure if this is either recommended or supported, but keen to here some feedback.

Thanks

DJ

[hslai · Accepted solution]

Sure, we may apply the same to that for EAP. In case you have read it, I would recommend How To: Implement ISE Server-Side Certificates

[dazza_johnson]

Cool - you can use the same EAP cert on all nodes and the CN is not really tied to the ISE FQDN - it can be anything really.