Trusted Certificates in ISE

[santhoshkdhanapal]

Hi All,

     In Cisco ISE, I didn't generate neither CSR nor binding certificate. In trusted certificate store , I uploaded trusted certificate of intermediate CA. I got padlock symbol for GUI admin access and guest portal yet to implement.

Is this a security risk in infrastructure? Any suggestions I appreciate in advance.

Cheers,

Santhosh

[Greg Gibbs]

How To Implement Digital Certificates in ISE 

[santhoshkdhanapal]

Thanks @Greg Gibbs for sharing the resource link. However I gone through that link before. My concern(  Is trusted certificate alone enough for ISE configuration ?)

[Greg Gibbs · Accepted solution]

No. If you are not issuing a trusted CA-signed certificate for the Admin (or other functions), then ISE would be using self-signed certificates which are inherently insecure and difficult to manage across the environment.