cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
7554
Views
0
Helpful
5
Replies

ISE Alarm : Critical : EST Service not running 2.6

pnowikow
Level 1
Level 1

Community,

Ever since we upgraded our nodes to 2.6 my PSN is throwing this error.  Any ideas?

Thanks,

Pete

 


 

Alarm Name :
Process Down

Details :
 EST Service not running : Server=CiscoISEVM03

Description :
One of the ISE Process is not Running

Severity :
Critical

Suggested Actions :
Restart the ISE Application

*** This message is generated by Cisco Identity Services Engine (ISE) ***

Sent By Host : CiscoISEVM01

 


CiscoISEVM03/admin# sh appl stat ise

ISE PROCESS NAME STATE PROCESS ID
--------------------------------------------------------------------
Database Listener running 11894
Database Server running 121 PROCESSES
Application Server running 23758
Profiler Database running 16906
ISE Indexing Engine running 27003
AD Connector running 7049
M&T Session Database running 16584
M&T Log Processor running 2645
Certificate Authority Service initializing
EST Service not running
SXP Engine Service disabled
Docker Daemon running 18107
TC-NAC Service disabled

Wifi Setup Helper Container disabled
pxGrid Infrastructure Service disabled
pxGrid Publisher Subscriber Service disabled
pxGrid Connection Manager disabled
pxGrid Controller disabled
PassiveID WMI Service disabled
PassiveID Syslog Service disabled
PassiveID API Service disabled
PassiveID Agent Service disabled
PassiveID Endpoint Service disabled
PassiveID SPAN Service disabled
DHCP Server (dhcpd) disabled
DNS Server (named) disabled
ISE Messaging Service running 19115

CiscoISEVM03/admin#

1 Accepted Solution

Accepted Solutions

Damien Miller
VIP Alumni
VIP Alumni

I would highly recommend engaging TAC since it very likely that you are hitting this bug.
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvt14248

Certificate Authority Service initializing EST Service not running after upgrade to ISE 2.6
Symptom:
--- after upgrade from ISE 2.2/2.3 to ISE 2.6/2.7 Certificate Authority Service is stuck in initializing EST Service is stuck in not running

Conditions:
--- upgrade from ISE 2.2/2.3 (maybe other version as well)

Workaround:
Contact TAC to manually clean up the certificate service.
-- or --
The node can be re-imaged from ISO and rejoined to the cube.

View solution in original post

5 Replies 5

Damien Miller
VIP Alumni
VIP Alumni

I would highly recommend engaging TAC since it very likely that you are hitting this bug.
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvt14248

Certificate Authority Service initializing EST Service not running after upgrade to ISE 2.6
Symptom:
--- after upgrade from ISE 2.2/2.3 to ISE 2.6/2.7 Certificate Authority Service is stuck in initializing EST Service is stuck in not running

Conditions:
--- upgrade from ISE 2.2/2.3 (maybe other version as well)

Workaround:
Contact TAC to manually clean up the certificate service.
-- or --
The node can be re-imaged from ISO and rejoined to the cube.

I'm hitting this bug - How does one "clean up certificate services".  I really don't want to have to re-image this node.

Please open a TAC case. If they need to manually clean up certificates, it will require installing the root patch and modifying database records.

I have this problem too, TAC try workaround but not success, I will reimage on the next week.

TAC said that EST service affect to BYOD.

Cisco TAC won't be able to fix this. Neither will Cert regenerate or reimaging. Seems like a permanent bug. Had tried all the above and more, none worked.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: