CISCO Prime 3.4 job Identity Services Engine Failed

[Nadia Bbz]

Dear Team ,

i usually get job failed about Identity Services Engine Status

i don't know the reason for this error  as show attached

thanks for help

[balaji.bandi]

I believe the attachment is missed here.

please check the admin guide and check the config on the admin GUI of prime as per the below document :

https://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/3-4/admin/guide/bk_CiscoPrimeInfastructure_3_4_AdminGuide/bk_CiscoPrimeInfastructure_3_4_AdminGuide_chapter_0101.html

[Nadia Bbz]

Dear Team ,

yes i missed attached

thanks for help

[Nadia Bbz]

Dear Team ,

yes i missed attached

thanks for help

[balaji.bandi]

Click on the job, click on the history or event should show the reason of failure.

[Nadia Bbz]

hey,

the reason of failure :  no data is available

i don't know how to resolve it

[Y C]

Under Administration > Servers > ISE Servers do you have your ISE servers setup there? They need to be the servers assuming the monitor personas if you have a distributed deployment. Is there status shown as reachable? If no to either question then I imagine it's normal for the job to fail.

[Nadia Bbz]

thanks for you help , yes the status of Identity Services Engine server unreachable

Identity Services Engine update failed : Some unexpected internal error has occurred.

how to configure it correctly

[Y C · Accepted solution]

Well, there's not much to adding the ISE server to prime - just username/password http timeout and port. Port is 443, timeout is 30.

Are you able to ping prime from the ISE monitor node ? Have you tried deleting the server from prime and set it back up?

Assuming no reachability issues and the proper id/pw, check the output of "ncs certvalidation tofu-certs listcerts" from prime. If the cert for your ISE server is listed, delete it using "ncs certvalidation tofu-certs listcerts" and then try re-adding it. If that doesn't work, it's a TAC case.

[Nadia Bbz]

Thanks so much for your help

[bellil.amine]

it work for me,

to delete the old certificate use the cmd :

ncs certvalidation tofu-certs deletecert host <iseIPaddress_port>

thank you Y C.