SSL certificate from cloudflare for cisco ISE guest portal

[absuizo14]

Greetings,

does any one have any idea on how to download a bundle certificate or separate certificate(device,intermediate,root) and key from cloudflare? these are needed to generate a chain for our guest captive portal on ISE but the only ones i see from cloudflare are  edge certificate, client certificate, origin server which, i think, are not the correct certs.

[Mohammed al Baqari]

Hi,

You can download the CA from here.

https://developers.cloudflare.com/ssl/origin-configuration/origin-ca/

You don't get a key from cloudflare. Key will be set on the server that
generated the CSR. This is how PKI works. For ISE, you don't need the
entire chain for the client to trust the cert. Only a root cert will do the
job.

**** please remember to rate useful posts

[absuizo14]

Hi @Mohammed al Baqari,

I kind of get what you mean but im not familiar with this method on ISE. can you share the procedure on ISE once i have obtained the root cert?

[Greg Gibbs]

I would suggest reviewing How To Implement Digital Certificates in ISE 

There is also a webinar available for ISE Digital Certificate Administration from https://cs.co/ise-webinars.