04-01-2020 12:40 PM
Community,
Ever since we upgraded our nodes to 2.6 my PSN is throwing this error. Any ideas?
Thanks,
Pete
Alarm Name :
Process Down
Details :
EST Service not running : Server=CiscoISEVM03
Description :
One of the ISE Process is not Running
Severity :
Critical
Suggested Actions :
Restart the ISE Application
*** This message is generated by Cisco Identity Services Engine (ISE) ***
Sent By Host : CiscoISEVM01
CiscoISEVM03/admin# sh appl stat ise
ISE PROCESS NAME STATE PROCESS ID
--------------------------------------------------------------------
Database Listener running 11894
Database Server running 121 PROCESSES
Application Server running 23758
Profiler Database running 16906
ISE Indexing Engine running 27003
AD Connector running 7049
M&T Session Database running 16584
M&T Log Processor running 2645
Certificate Authority Service initializing
EST Service not running
SXP Engine Service disabled
Docker Daemon running 18107
TC-NAC Service disabled
Wifi Setup Helper Container disabled
pxGrid Infrastructure Service disabled
pxGrid Publisher Subscriber Service disabled
pxGrid Connection Manager disabled
pxGrid Controller disabled
PassiveID WMI Service disabled
PassiveID Syslog Service disabled
PassiveID API Service disabled
PassiveID Agent Service disabled
PassiveID Endpoint Service disabled
PassiveID SPAN Service disabled
DHCP Server (dhcpd) disabled
DNS Server (named) disabled
ISE Messaging Service running 19115
CiscoISEVM03/admin#
Solved! Go to Solution.
04-01-2020 01:43 PM
I would highly recommend engaging TAC since it very likely that you are hitting this bug.
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvt14248
04-01-2020 01:43 PM
I would highly recommend engaging TAC since it very likely that you are hitting this bug.
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvt14248
06-24-2020 08:45 AM
I'm hitting this bug - How does one "clean up certificate services". I really don't want to have to re-image this node.
06-24-2020 08:59 PM
Please open a TAC case. If they need to manually clean up certificates, it will require installing the root patch and modifying database records.
01-07-2021 10:57 PM - edited 01-07-2021 11:03 PM
I have this problem too, TAC try workaround but not success, I will reimage on the next week.
TAC said that EST service affect to BYOD.
08-31-2021 09:47 AM
Cisco TAC won't be able to fix this. Neither will Cert regenerate or reimaging. Seems like a permanent bug. Had tried all the above and more, none worked.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide