cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

1587
Views
5
Helpful
6
Replies
Highlighted
Enthusiast

ISE Client provisioning portal Cert error

When a client connects to the network and or VPN they do to hit ISE for posture scan, but always prompted its an untrusted server. The Issue I am going to have is I will have PCs connecting to this from 2 different forests and contractors that do not have company issued laptops so they will get a prompt also. So are people using third party certs for their provisioning portals and guest wifi portals?

1 ACCEPTED SOLUTION
6 REPLIES 6
Highlighted

I figured. I mean thats probably the best way anyway.
Highlighted

Maybe I am missing it but when I get a third party cert from like verisign where is the section to create the cert request?
Highlighted

You should be able to generate the CSR by going to Administration > Certificates > Certificate Signing Requests > Generate Certificate Signing Request (CSR) in ISE. 

Highlighted

Back to this for a min. Unless I had a wildcard trusted third party cert I would need an individual cert for every portal I want to protect with ssl correct? So if I have a password portal called passwordreset.domain.com and a client provisioning portal called client.domain.com I would need to certs? How do I generate the csr for each one?
Highlighted

Generate Multiuse cert with FQDN and multiple SANs with what you want the portal URIs to be.
Content for Community-Ad