ISE certificate shenanigans, unable to renew root or messaging cert.

[Martin Ostberg]

Hey.

I recently split a 2 node deployment because of and IP change.

Two VM servers running 3.2.0 with patch 7.

And after the IP change we've been having all sorts of problems with the guest portal not working and some sync problems between the nodes as well.

I wanted to renew the ISE messaging certificate and also the root chain, but I don't have the option, it's missing from the list.

It should look like this (from another deployment, also running 3.2.0, patch6)

This is from the deployment where it's missing.

Any ideas?

[Martin Ostberg · Accepted solution]

I figured it out, the CA server service was not enabled. Looks OK now.