ISE CSR using OpenSSL

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-29-2016 04:53 AM - edited 03-10-2019 11:43 PM
Hi,
I would like to prepare CA-signed certificate for ISE before onsite. Can I using openSSL to generate CSR for ISE 1.4? Please let me know how to import private key and CA-signed certificate into the ISE.
Thanks in advance
- Labels:
-
AAA

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-29-2016 08:17 AM
Yes, you can import an SSL certificate and private key into ISE. Be sure you import the root CA certificate into the Trusted Certificates store first. Review the directions here, under Import a System Certificate, for more information:
Cisco ISE 1.4 Admin Guide - Managing Certificates
Are you using a wildcard? If so, the wildcard needs to be in the SAN. Use a generic name (e.g. aaa.domain.com) as the CN.
