07-10-2015 07:44 AM - edited 03-10-2019 10:53 PM
Hello,
We would like to set our ISE as CA (ISE 1.4.0.253 ADE-OS 2.2.0.421), but we don't have the "Certificate Authority" tab inside our panel, please see the printscreen "our panel.jpg" in attachment.
Usually we should have this tab at:
Administration > System > Certificates > Certificate Authority
as on the printscreen "certificate authority.jpg" in attachment.
Could you tell us if this problem comes from:
- license limitation,
- service disabled problem,
- upgrade problem (we've just migrated from 1.2 to 1.4)
or another reason?
For your information, when we log into the PAN server and do a "sh ap stat ise", we get :
ISE PROCESS NAME STATE PROCESS ID
--------------------------------------------------------------------
Database Listener running 2976
Database Server running 31 PROCESSES
Application Server running 24634
Profiler Database running 4989
AD Connector running 6801
M&T Session Database disabled
M&T Log Collector disabled
M&T Log Processor disabled
Certificate Authority Service disabled
pxGrid Infrastructure Service disabled
pxGrid Publisher Subscriber Service disabled
pxGrid Connection Manager disabled
pxGrid Controller disabled
Identity Mapping Service disabled
Regards,
Chris
07-15-2015 10:06 AM
Well, i have not seen this before, but it could be because of licensing, as the built-in CA requires the plus license to work.
01-26-2016 10:25 AM
We are having the same issue with our ISE Development node running on version 1.4. There is no internal CA settings option under the certificate settings.
Did you get this resolved?
01-26-2016 10:34 AM
What license do you have installed on the ISE? You would need plus license as ISE internal CA comes under BYOD and that is supported by plus license. ISE 1.4 Licenses
~ Jatin
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide