setting certificate authentication to ssh connect to admin panel

[maladi]

Hello,

How can I set a certificate authentication to admin user who  connect with ssh to ise administrator panel?

Thank you 

[RichardAtkin]

1. Create a Certificate Authentication Profile (under external identity sources) for the Certs

2. Go to Administration > System > Admin Access > Authentication > Authentication Method

3. Select Certificate Based

4. Reference the Cert Auth Profile you made in step 1.

5. Reference your AD as the Identity Store (for later group lookups so you can have different types of admin, presuming the CN on the Cert = an AD User Account)

6. Associate Admin Groups with specific AD Groups

7. Done.

[RichardAtkin]

Oops... RTFQ!

That applies only to the Web GUI.  SSH is Username / Password only.

[RichardAtkin · Accepted solution]

Looks like it is possible - see here.

https://community.cisco.com/t5/identity-services-engine-ise/setting-certificate-to-admin-s-ssh/m-p/3690882

Rich