ISE CSR using OpenSSL

[james.song1]

Hi,

I would like to prepare CA-signed certificate for ISE before onsite. Can I using openSSL to generate CSR for ISE 1.4? Please let me know how to import private key and CA-signed certificate into the ISE.  

Thanks in advance

[Joseph Johnson]

Yes, you can import an SSL certificate and private key into ISE. Be sure you import the root CA certificate into the Trusted Certificates store first. Review the directions here, under Import a System Certificate, for more information:

Cisco ISE 1.4 Admin Guide - Managing Certificates

Are you using a wildcard? If so, the wildcard needs to be in the SAN. Use a generic name (e.g. aaa.domain.com) as the CN.