ISE Scalability with SCEP

[Jay Tiwari]

Hi Experts,

My customer has requirement of BYOD deployment with SCEP, means ISE will be used as sub CA for cert provisioning to the endpoints.

Now question is, how many certificates can generate, enroll and managed by ISE? Is there any such scale number for ISE?

PAN, PSN, MnT and pxGrid personas are deployed in separate nodes/boxes. Appliance is SNS 3595.

Many Thanks,

Jay

[howon · Accepted solution]

1M certificates if ISE is managing certificates: https://community.cisco.com/t5/security-documents/ise-performance-amp-scale/ta-p/3642148#toc-hId-494938388

If using SCEP proxy option and certificates are managed by external PKI such as MS CA, then no limit on ISE, but will depend on the external PKI limits.