01-12-2020 06:33 PM
Hi Experts,
My customer has requirement of BYOD deployment with SCEP, means ISE will be used as sub CA for cert provisioning to the endpoints.
Now question is, how many certificates can generate, enroll and managed by ISE? Is there any such scale number for ISE?
PAN, PSN, MnT and pxGrid personas are deployed in separate nodes/boxes. Appliance is SNS 3595.
Many Thanks,
Jay
Solved! Go to Solution.
01-13-2020 05:07 AM
1M certificates if ISE is managing certificates: https://community.cisco.com/t5/security-documents/ise-performance-amp-scale/ta-p/3642148#toc-hId-494938388
If using SCEP proxy option and certificates are managed by external PKI such as MS CA, then no limit on ISE, but will depend on the external PKI limits.
01-13-2020 05:07 AM
1M certificates if ISE is managing certificates: https://community.cisco.com/t5/security-documents/ise-performance-amp-scale/ta-p/3642148#toc-hId-494938388
If using SCEP proxy option and certificates are managed by external PKI such as MS CA, then no limit on ISE, but will depend on the external PKI limits.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide