ISE || What is "Trust for certificate based admin authentication" for?

[SMD28316]

On ISE, We can modify the certificates on the trusted store to be used for "Trust for certificate based admin authentication", but what is this option for exactly? I understand that it is used for EAP based authentication, but what does the "admin authentication" mean?

[Mike.Cifelli]

Trust for certificate based admin authentication"

-Admin authentication is referring to accessing the PAN UI aka admin access.  If you use/setup certificate based authentication for "admin access" then the respective cert chain/s must be imported into the trust store, and enabled to support admin authentication.  HTH!

[SMD28316]

I never knew I can configure the admin access as a certificate based, do you have any documents to configuring this?

Thank you so much

[Mike.Cifelli · Accepted solution]

No problem.  This should help: Configure Certificate or Smartcard Based authentication for ISE Administration - Cisco

Here is another link for some other ISE cert related topics: How To Implement Digital Certificates in ISE - Cisco Community

Good luck & HTH!