Please help Install a 3rd party CA Certificate in ISE

[JustTakeTheFirstStep]

I requested a CSR created by ISE to a 3rd party and was issued a certificate.

The 3rd party sent the following certificates.

I am going in the same way as the link below.

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-software/200295-Install-a-3rd-party-CA-certificate-in-IS.html

First, RootCA.crt was installed in Trusted Certificates.

What certificate should be Bind in CSR afterwards??

Can you tell me in detail about my next staff??

[Francesco Molino · Accepted solution]

Hi

Based on the name, the bundle crt file is the full chain to import in trusted store. Then the pem file is the one to bind to your ise csr.

[JustTakeTheFirstStep]

Thank you for answer.

I will try the pem file to CSR bind.

Please advise what items should be checked in the checkbox

My purpose is to prevent the Untrutsted Server message from popping up when using Anyconnect Posture.

For reference, ASA has a certificate installed.

Please check attach the files

[Francesco Molino]

Hi

I’m not sure i understand. You’re showing a capture for ise certificate import and the other is a non trusted message from anyconnect.

Is it when you are trying to download the posture module?
Your anyconnect tries to connect using an ip. If you want to user a trusted certificate from your ise portals, you should configure your authorization profile to return a fqdn that will match what is in your san certificate or within the same domain if your using a wildcard.