Thank you Carlos. I was having this same issue. Your workaround allowed me to successfully execute the patch. Thank you!

Thank you so much for this post. I've been troubleshooting this issue over a week. So, basically we cannot have the ISE Messaging certificates signed by our own CA. It must be issued by ISE internal CA, otherwise ISE Messaging breaks.