About Arne Bier

Arne Bier · 03-17-2025

Free Certs Anyone? Have you ever wanted to get a public certificate for your ISE Portal, without the hassle of involving a commercial CA? If so, read on. This lengthy guide (maybe better as a Youtube video ... in future) will show you how I setup a...

Arne Bier · 03-12-2025

Free Certs Anyone? Have you ever wanted to get a public certificate for your ISE Portal, without the hassle of involving a commercial CA? If so, read on .. This lengthy guide (maybe better as a Youtube video ... in future) will show you how I setup ...

Arne Bier · 12-11-2024

Hi I had an idea about using ISE as an endpoint certificate tracking tool, to check for the following: What TLS version are my endpoints using? (e.g. can I disable TLS 1.0 etc)When are my endpoint certificates expiring (e.g. I have deployed certs on ...

Arne Bier · 11-12-2024

Hello, I started using the brilliant ISE Data Connect feature on my fully distributed deployment to extract data from the Secondary Monitoring node (SQL API). However, now ISE is Alarming about the Trusted Certificate with Friendly Name "Data Connect...

Arne Bier · 10-03-2024

Hello, Issue - I see these in the Dashboard Alarms and I want to know the cause. The PAN, MNT and PSN are all on the same subnet. ISE 3.3p3 Catalyst switch: IOS-XE17.06.05 (but happens on other versions too) I need some advice with why ISE is report...

Re: Cisco ISE - 802.1X User not Found · 04-23-2025

When a Windows domain joined computer boots up, and if there is an 802.1X supplicant configured, then the OS will perform a machine authentication (hostname). Then, if you have User/Machine authentication configured in your supplicant, the OS will pe...

Re: Cisco ISE - 802.1X User not Found · 04-23-2025

Have you tried performing a Lookup of that computer on one of your PSN nodes? You can select any of the nodes that is AD Joined to the appropriate AD Domain, and then perform a Test, Lookup function. That would be a good start. By default, ISE has ...

Arne Bier · 04-22-2025

Isn't the whole point of renewing your certificate, that we generate a new public/private key pair as part of the process? I don't know what the valid use case is of retaining the keys, but to simply update the Valid From/To and the fingerprint. Do...

Arne Bier · 04-21-2025

Hi @Simon Z I'm glad you found the article useful. I did all of my development in Linux - as you experienced, there will be additional challenges to adapt this to other envitonments - but the concepts remain the same. As for importing the system cer...

Arne Bier · 04-10-2025

I would think this is an issue for the supplicant to solve, because it sounds like there is an ambiguity that the supplicant is asking the user to resolve. If the supplicant can have more constraints and rules applied (e.g. like the Windows native su...

Member Since	‎02-23-2017 06:57 PM
Date Last Visited	‎04-23-2025 02:06 PM
Posts	3,861
Total Helpful Votes Received	5783

User Statistics

User Activity

Automatic ISE Portal Certificate Renew with Letsencrypt - how to guide

Automatic ISE Portal Certificate Renew with Letsencrypt - how to guide

ISE as an Endpoint EAP-TLS certificate expiration audit tool

Renewing or Deleting ISE Data Connect Trusted Certificate

Dynamic Authorization Failed - No Response has been received - CoA

Re: Cisco ISE - 802.1X User not Found

Re: Cisco ISE - 802.1X User not Found

Re: Automatic ISE Portal Certificate Renew with Letsencrypt - how to g

Re: Automatic ISE Portal Certificate Renew with Letsencrypt - how to g

Re: Help with Cisco ISE and Macbooks