ISE 1.1.1 don't have certificate authority certificate anymore?

Hi all,
i am working on ISE 1.1.1, surprisingly i couldn't found certificate authority certifiate at certificate operation anymore.
would it be the change on GUI? So now where i can import the CA certificate to ISE?
Thanks
Noel

Hi,
The document is pretty clear and the directions are stated here:
http://www.cisco.com/en/US/docs/security/ise/1.1.1/user_guide/ise_man_cert.html#wp1053515
Thanks,
Tarik Admani
*Please rate helpful posts*

Similar Messages

ISE Certificate Authority Certificate

I'm confussed about the certificates:
Some weeks ago a certificate was installed in the ISE to avoid the browser certificate error when the customer access the sponsor portal ...
Now, the customer is requesting to authenticate the sponsor users through LDAPS ... I understand Active Directory or LDAP as External Identity Sources are not secure. So, in order to enable LDAPS we must check the Secure Atuthentication box in the LDAP configuration, but a ROOT CA must be chooseen also.
I understand the ISE should validate the customer PKI in order to validate the user certificate ... Am I right?
Do I need request the customer to provide me the "Certificate Authority Certificate" from its PKI ??
Is it a file completely different to the certificate already loaded in the ISE ??
With this certificate, would the ISE validate the user's computer certificate additional to user and password ??
Would the user must use a computer with certificate in order to access the sponsor portal ??
Thanks in advance.
Regards
Daniel Escalante.

Please follow the "secure authentication tab" in the below table( highlighted)
go to >LDAP Connection Settings
Table lists the fields in the LDAP connection tab and their descriptions.
Table : LDAP Connection Tab
Option Description
Enable Secondary Server
Check this option to enable the secondary LDAP server to be used as a backup in the event that the primary LDAP server fails. If you check this check box, you must enter configuration parameters for the secondary LDAP server.
Primary and Secondary Servers
Hostname/IP
(Required) Enter the IP address or DNS name of the machine that is running the LDAP software. The hostname can contain from 1 to 256 characters or a valid IP address expressed as a string. The only valid characters for hostnames are alphanumeric characters (a to z, A to Z, 0 to 9), the dot (.), and the hyphen (-).
Port
(Required) Enter the TCP/IP port number on which the LDAP server is listening. Valid values are from 1 to 65,535. The default is 389, as stated in the LDAP specification. If you do not know the port number, you can find this information from the LDAP server administrator.
Access
(Required) Anonymous Access—Click to ensure that searches on the LDAP directory occur anonymously. The server does not distinguish who the client is and will allow the client read access to any data that is configured as accessible to any unauthenticated client. In the absence of a specific policy permitting authentication information to be sent to a server, a client should use an anonymous connection.
Authenticated Access—Click to ensure that searches on the LDAP directory occur with administrative credentials. If so, enter information for the Admin DN and Password fields.
Admin DN
Enter the DN of the administrator. The Admin DN is the LDAP account that permits searching of all required users under the User Directory Subtree and permits searching groups. If the administrator specified does not have permission to see the group name attribute in searches, group mapping fails for users who are authenticated by that LDAP.
Password
Enter the LDAP administrator account password.
Secure Authentication
Click to use SSL to encrypt communication between Cisco ISE and the primary LDAP server. Verify that the Port field contains the port number used for SSL on the LDAP server. If you enable this option, you must choose a root CA.
Root CA
Choose a trusted root certificate authority from the drop-down list box to enable secure authentication with a certificate.
See the "Certificate Authority Certificates" section on page 12-17 and "Adding a Certificate Authority Certificate" section on page 12-19 for information on CA certificates.
Server Timeout
Enter the number of seconds that Cisco ISE waits for a response from the primary LDAP server before determining that the connection or authentication with that server has failed. Valid values are 1 to 300. The default is 10.
Max. Admin Connections
Enter the maximum number of concurrent connections (greater than 0) with LDAP administrator account permissions that can run for a specific LDAP configuration. These connections are used to search the directory for users and groups under the User Directory Subtree and the Group Directory Subtree. Valid values are 1 to 99. The default is 20.
Test Bind to Server
Click to test and ensure that the LDAP server details and credentials can successfully bind. If the test fails, edit your LDAP server details and retest.

I would like to play music from my iPhone 5 on the speakers attached to my computer at work. I don't have the authority to download itunes onto the computer. Can I play the music from the phone without having itunes on the computer?

I would like to play music from my iPhone 5 on the speakers attached to my computer at work. I don't have the authority to download itunes onto the computer. Can I play the music from the phone without having itunes on the computer?

KiltedTim wrote:
The cable would be much cheaper than the Scotch!
But much less fun or satisfying.
Signed,
An IT guy

I've just migrated my Logic Pro 9.1.8 to a new Mac because my old computer crashed. They are asking for a serial number, but I don't have the install disks anymore. Is there someplace in the software itself that I can find the serial number?

I've just migrated my Logic Pro 9.1.8 to a new Mac because my old computer crashed. They are asking for a serial number, but I don't have the install disks anymore. Is there someplace in the software itself that I can find the serial number?

Please stop making multiple posts on the same subject.. This is the third thread you have created in a short space of time asking the same question.
Please read the answers given in this thread you posted...
https://discussions.apple.com/thread/5311324?tstart=0

Change Photoshop Elements 11 for windows into Phot now I don't have a windows PC anymore. Can change my windows serial number into a MAC/OS serial number? What do I have to do to get Elements 11(download) for OS an a serial number for Elements 11 for OS ?

I have Photoshop Elements 11 (full version with Serial Number) for windows; now I don't have a windows PC anymore. Can change my windows serial number into a MAC/OS serial number? What do I have to do to get Elements 11(download) for OS an a serial number for Elements 11 ?

You can download PSE 11 via the following linked web page:
PSE 10, 11 - http://helpx.adobe.com/photoshop-elements/kb/photoshop-elements-10-11-downloads.html

I want to use an old iphone as an itouch and don't have the sim card anymore and I just updated to the new software

I want to use an old iphone as an itouch and don't have the sim card anymore (cut it to fit into 4G) and I just updated to the new software.... How do I reload the phone with apps and music?

You'll need to get a SIM card. It can be an old one.

Hi everyone! On my MacBook Air Mid 2009 13" hinges are broken, and i don't have warinty on it anymore.!

Hi everyone! On my MacBook Air Mid 2009 13" hinges are broken, and i don't have warinty on it anymore.!
What should I do?
Thanks!

Still take it to an Apple store genius bar so you can get feedback on what it will cost for repair.
You can also see if you can find an Apple Authorized Service Provider and get a price from them, their work is accepted by Apple.
You can check iFixit.com and see if they have the hinge and price so you have another price for comparison.

I don't have the authority to download Adobe Flash Player. I'm using Microsoft Security Essentials. HOW DO I FIX THIS?????

I go to download this and it goes it install but then gives me error message: don't have authority to download.

Hi Lezotte, are you using this site for the download: https://get.adobe.com/flashplayer/
This page also has a download for the latest player (but I don't know whether it will work any better): https://www.adobe.com/products/flashplayer/distribution3.html
Would it be possible to capture a screen shot of the message you're receiving, or give the exact wording (so it's easy to search)? This article has tips on screen shots: [[How do I create a screenshot of my problem?]] Please delete or blur any sensitive information before attaching the image to your reply post.

HT204053 can I retrieve all my contacts from I Cloud? My I Phone 5 was stolen recently and I have done a simswap in order to keep my number but I don't have an I Phone anymore

My contacts were saved onto I Cloud but I don't have an Apple device to load them again.
I'm still paying off my stolen cell and am usiing a Nokia in the meantime.

You can download your contacts from icloud.com as a vCard, as explained here: http://support.apple.com/kb/PH3606. This can be used to import them to another service such as Google contacts. If your Nokia phone supports it, you could then set up your Gmail account on your phone and enable contacts syncing to view them on your phone.

Bought CDs from another site, don't have a CD drive anymore

I purchased CS6 Production Premium CD/DVD package from another website and installed it on a laptop running Windows 7. Everything worked fine, until my laptop dropped dead. I have a new laptop running Windows 8 and no CD/DVD drive. I logged into My Adobe, by don't have the option of downloading Production Premium, since I didn't purchase it from Adobe.com.
I attempted to download a trial of Production Premium, thinking I could just enter my serial number to activate the product. I installed the Download Assistant, but it does not launch the download of Production Premium--I have tried this three or four time--nor does it offer me Production Premium as a product "I might like" to pick for downloading.
How can I get this product that I purchased on my computer?

If you have the DVDs why not buy a DVD player they are cheap. You can go to another computer equiped with a DVD drive and transfer the files to a flash drive.

How can I deauthorize computers if I don't have any of them anymore

BHow can I deauthorize computers if I don't have any of them anymore

You need to deauthorize all computers and then reauthorize the ones you still have. See the quote below from Deauthorize your computer using iTunes - Apple Support
My computer doesn't work anymore. Can I deauthorize it?
You can't deauthorize a single computer if you don't have it or can't use it. Instead, you need to deauthorize all computers and then reauthorize the ones you're still using.

Certificate Authority certificate issued with incorrect hash algorithm

Hi all,
We have a certificate authority which was migrated from Server 2003 to 2008R2, the issue is that after running this command:
certutil -setreg ca\csp\CNGHashAlgorithm sha256
to upgrade the CA to SHA256, we renewed the CA certificate but the certificate still renewed using SHA1. The cryptographic settings in the CA properties dialog box says SHA256 however the certificate is issued using SHA1. Here is the image:
Any pointers to how we can reissue CA certificate with SHA256 algorithm?
Thanks,
Ojas

[Puneet Singh] What i feel is that your initial key which was generated was CAPI based that might be the reason you might be facing the problem.
Try to do the things in below sequence.
certification authority’s system, you will need to run the following commands from an elevated command line window:
certutil -setreg ca\csp\CNGHashAlgorithm SHA256
net stop certsvc
net start certsvc
Make sure you are using a Key Storage Provider that supports SHA256 – for example the Microsoft Key Storage Provider -
and then renew the certification authority’s certificate.
if you have the CAPI provider or you are CAPI based key then you have to convert it to CNG key and use certutil
repair so that it does start using the CNG key.
Puneet Singh

Can't I get my old iTunes that I have purchased downloaded from Apple? I don't have the old computer anymore. Also, is there a number to call if I think I have more than one account and would like them to consolidate my accounts?

I have two problems:
1. I no longer have my old computer and want to download the iTunes I have purchased in previous years. Aren't they all in "the cloud?"
2. I think I have more than one account and would like to get them combined. Is there a good number or email to Apple that I could get that done?
THanks!
SHawn

It has always been very basic to always maintain a backup copy of your computer. Have you failed to do this?
You can redownload some iTunes purchases in some countries:
Download past purchases - Apple Support
As provided, you cannot merge accounts
Sorry

Help i don't have an internet icon anymore!!!

I've been having alot of trouble out of my blackberry.. i recently turned it on and now i have no media net icon!! and when i try to connect to the net on my phone it says: Your device does not currently have any Browser Configuration Service book Entries. Please contact your service provider to enable the browser on your device...
How do i do that?? somehow it got deleted.. it's been working just fine.. I love this phone but for some reason it will erase all my txt messages just for no reason.. I know my memory card is not full i've checked the memory on my phone and my 1gb memory slot card.. I don't understand why this does this!!

For the internet icon part, try reregistering your device. Go into Options | Advanced Options | Host Routing Table. Select the bold entry, hot your menu button and choose Register Now. see if you get a registration message email.
As for the other question, it sounds like the device may be running out of memory. The contents on the media card don't count towards the memory usage on a device.
Can you check under Options | Status and make note of your File Free number. Afterwards reset the device by removing the battery and 1 min and replace it and let the device reboot. After it's done check and see if your File Free Number increased.
Also do you have a lot of third part applications on the device that you don't need? If so you can do into Options | Advanced Options | Applications and delete the ones you no longer need.
Check out this link for other ways to free space on a BlackBerry: http://www.blackberry.com/btsc/KB14320
If someone has been helpful please consider giving them kudos by clicking the star to the left of their post.
Remember to resolve your thread by clicking Accepted Solution.

For some reason I don't have my cellphone number anymore

Hello!
I used to have my old cellphone number on my iPod and now I only have my email for
imessage and now my friends can't text me first And I don't know what and I don't know how to change it:( what do i do?!

Do you still have an iPhone using the same Apple ID? See:
iOS and OS X: Link your phone number and Apple ID for use with FaceTime and iMessage

ISE 1.1.1 don't have certificate authority certificate anymore?

Similar Messages

Maybe you are looking for