Lab Minutes Forum
Technical Discussion => Security => Topic started by: adecisco on November 23, 2013, 12:17:27 AM
-
Day 2 just past and the progress is quite encouraging. Certificate generation was done in such a way that just one csr for all the 9 Node this really save time as against generating csr for 9. I think I will include that among the list of deployment tips that will aid faster implementation.
Before the adding the certificate to store I has issues with applying license of the total number of endpoints. I later discover that the issues was as a result of trying to apply .lic license file before adding the certificate. I really cannot understand the relationship but ISE output when I try to add the license was "No certificate found in input" hence the show stopper appear. I could not get any help from Google. But things went well after I apply the certificate issues by CA to Admin node I try the license again and that is it went through. It's quite a lesson for those who will be handling 1.2 deployment.
The lesson here is before you apply the license ensure you have applied the CA certificate especially on the Admin node where the license will reside.
As can be seen in the attached green is good but sometime amber means be patient it will be good :) Whenever I see green my cheeks grow!
My DR is not yet ready that is why the remain four equipment are not listed but for now I the Primary sites initial setup completed.
-
It is interesting to hear that you need to install cert (I assume third party or internally signed since you mentioned CSR generation) before the license. It does not make sense since you should be able to install the license even if all you have are self-signed certs. But this is good information so we can keep our eyes out for those.