None "Certificate Authority" tab on ISE PAN 1.4 ?

[chrbar.net]

Hello,

We would like to set our ISE as CA (ISE 1.4.0.253 ADE-OS 2.2.0.421), but we don't have the "Certificate Authority" tab inside our panel, please see the printscreen "our panel.jpg" in attachment.

Usually we should have this tab at:
Administration > System > Certificates > Certificate Authority
as on the printscreen "certificate authority.jpg" in attachment.

Could you tell us if this problem comes from:
- license limitation,
- service disabled problem,
- upgrade problem (we've just migrated from 1.2 to 1.4)
or another reason?

For your information, when we log into the PAN server and do a "sh ap stat ise", we get :

ISE PROCESS NAME STATE PROCESS ID
--------------------------------------------------------------------
Database Listener running 2976
Database Server running 31 PROCESSES
Application Server running 24634
Profiler Database running 4989
AD Connector running 6801
M&T Session Database disabled
M&T Log Collector disabled
M&T Log Processor disabled
Certificate Authority Service disabled
pxGrid Infrastructure Service disabled
pxGrid Publisher Subscriber Service disabled
pxGrid Connection Manager disabled
pxGrid Controller disabled
Identity Mapping Service disabled

Regards,
Chris

[jan.nielsen]

Well, i have not seen this before, but it could be because of licensing, as the built-in CA requires the plus license to work.

[awatson20]

We are having the same issue with our ISE Development node running on version 1.4. There is no internal CA settings option under the certificate settings.

Did you get this resolved?

[Jatin Katyal]

What license do you have installed on the ISE? You would need plus license as ISE internal CA comes under BYOD and that is supported by plus license. ISE 1.4 Licenses

~ Jatin