ISE 2.3 - How to use certificate Authority Key Identifier in ISE policy

[Marco Noviello]

Hi,

I try to find out how to use the Authority Key Identifier (AKI) in an authorization policy.

Unfortunately I do not find this attribute in the certificate dictionary.

Did some one already implement this?

Regards

Marco

[Timothy Abbott · Accepted solution]

Marco,

We currently don't have the ability to match on that extension in authorization policy.  The closest thing we have today is the ability to match on the issuer of the certificate.

Regards,

-Tim

[Marco Noviello]

Timothy,

ok, did you think it could be an enhancement request?

Regards

Marco

[Timothy Abbott]

Marco,

Yes.  Please reach out to your Cisco sales team.  They will be able to help you submit an enhancement request.

Regards,

-Tim