Hello Dennis,   Is this still valid? As it's never marked as solved.   Ideally what you'll want to do is create a certificate request at the cluster level using one of the CN names, and then when you request signing from the CA you'll ask them to add...

Hi RJI, I agree with you that using "tunnel mode gre ip" encapsulates the packets within GRE, still that alone does not provide encryption. Only if by adding an IPSEC profile for tunnel protection by issuing command "tunnel protection ipsec profile X...

Hello dale,I open a cisco TAC case for my CNA problem.I let you know if they find a solution. 

I have the same problem with a stack of two cisco 3850.Only the port status of main switch appeared and the same status is duplicated to the second switch.Have you got any idea how to fix this? I upgraded to CNA 6.2 but no luck.