How to generate Certificate on Cisco ISE 2.2 for Policy servers

[Isah Mohammed]

Hello,

Please i need a guide on How to generate Certificate on Cisco ISE 2.2 for Policy servers?

Thanks

[Arne Bier · Accepted solution]

You should be generating certificates for all of your ISE nodes, not just the Policy nodes.

This is typical for many deployments

• Admin certs and EAP certs (you could combine the role into one cert per server) - you should create a CSR from PAN node and provide it to your PKI team
• Portal certs (from any reputable public CA) - create a CSR and provide it to them.

This is just high level overview.  The details are much more intricate.  Do some googling around or look at step by step videos here - it doesn't get any better than this (watch and learn)

How to Configure ISE 2.2 Certificate and Node Registration (Part 1)

How to Configure ISE 2.2 Certificate and Node Registration (Part 2)

[kthiruve]

Thank you Arne.

-Krishnan