ISE Upgrade Wizard Needs Admin Cert in Trust Cert Store - WHY?

[Arne Bier]

Hello,

Playing around in the lab with an ISE 3.2p3 two-node deployment, that I want to upgrade to ISE 3.3, using the GUI Upgrade Wizard.

But I am already failing the pre-upgrade checks, and I don't see why this is a requirement to upgrade an ISE deployment?

I never put Admin certificates in the Trusted store - why would I need to? They are all signed by the same CA whose cert I put in the Cert Trust Store

[ahollifield]

Yeah I agree, this makes zero sense.

[hslai]

CSCwe66220 admin certificate required in trusted store to enable secure syslog

is one use case needing it there, but that is rare since ISE default to use ISE Messaging Service for MnT syslog.

I am checking with our team.

[hslai · Accepted solution]

CSCwh08387 During Upgrade, Admin Certificate Should Not Be Required in Trusted Certificate Store

opened to track this.