About brdly

brdly · 10-25-2025

Hi all — looking for advice and best-practice steps to migrate an older Cisco iPSK Manager deployment onto a fresh, managed Ubuntu VM while preserving existing endpoint/PSK data.Current SetupUbuntu 18.04 LTS (standalone; not joined to AD; limited mon...

brdly · 09-10-2025

We run a distributed ISE deployment with 2x PANs, 2x MNTs, and 6x PSNs (two spare). We want the two spare PSNs to terminate 802.1X/EAP with a legacy server cert/CA chain, while two other PSNs keep the modern cert/chain. NADs/WLANs will be scoped so c...

brdly · 09-11-2025

Hey, I raised a case with Cisco TAC regarding this question, and they got back to me with the following: ISE 3.2 fully supports having different EAP server certificates (and CA chains) on individual PSNs. You simply bind the desired cert to the EAP A...

brdly · 09-11-2025

Hey @PSM, just sanity checking - You had PSNs in the same "deployment" with different SSL certificates assigned to the EAP Auth role. And you just carefully pointed NADs at the right PSN with the correct SSL certificate to provide services as require...

Member Since	‎07-10-2025 05:57 PM
Date Last Visited	‎12-12-2025 04:22 AM
Posts	4

User Statistics

User Activity

Migrating Old iPSK Manager to a New Ubuntu SOE VM & Fresh iPSK Manager

Can PSNs in a deployment use different EAP Auth cert/CA chains?

Re: Can PSNs in a deployment use different EAP Auth cert/CA chains?

Re: Can PSNs in a deployment use different EAP Auth cert/CA chains?