cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
672
Views
1
Helpful
6
Replies

ISE CA for 4000 endpoints

nmourtzi
Cisco Employee
Cisco Employee

Customer wants to user the ISE CA for 4000 endpoints (WifiPersonalLaptops,tablets,smartphones).

It will be used for BYOD flow so that ISE can provision the device and provide certificate with EAP-TLS and supplicant configuration.

They do not want to use the corporate Microsoft CA.

Based on the below document, ISE supports up to 1.000.000 usercertificates.

https://communities.cisco.com/docs/DOC-68347

So I guess 4k-5k certificates will be ok for this certificate.

Is this correct ?

Any feedback for any issues from a similar customer deployment ?


Thanks,

Nikos


1 Accepted Solution

Accepted Solutions

Jason Kunst
Cisco Employee
Cisco Employee

Yes, no concern? Why do you have one?

View solution in original post

6 Replies 6

Jason Kunst
Cisco Employee
Cisco Employee

Yes, no concern? Why do you have one?

Many Thanks. Parter did not have experience on ISE internal CA. That's why they were asking.

kthiruve
Cisco Employee
Cisco Employee

Hi Nikos,

Also check out ISE 2.3 scenario based performance that describes how many certs issued per second and related performance. It is good to know this information when you provision certificate for the first time.

Thanks

Krishnan

Many Thanks for your help.

You said partner didn’t have experience on ISE internal ca, this is more robust than using external ca as it has less parts and complexities

This is great.

Jason, many thanks

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: