300-715 · Question #107
An administrator is attempting to replace the built-in self-signed certificates on a Cisco ISE appliance. The CA is requesting some information about the appliance in order to sign the new…
The correct answer is B. Generate the CSR. To replace built-in self-signed certificates with CA-signed ones on a Cisco ISE appliance, the administrator must first generate a Certificate Signing Request (CSR). This CSR provides the Certificate Authority (CA) with the necessary public key and identity information for…
Question
An administrator is attempting to replace the built-in self-signed certificates on a Cisco ISE appliance. The CA is requesting some information about the appliance in order to sign the new certificate. What must be done in order to provide the CA this information?
Options
- AInstall the Root CA and intermediate CA.
- BGenerate the CSR.
- CDownload the intermediate server certificate.
- DDownload the CA server certificate.
How the community answered
(54 responses)- A4% (2)
- B89% (48)
- C2% (1)
- D6% (3)
Why each option
To replace built-in self-signed certificates with CA-signed ones on a Cisco ISE appliance, the administrator must first generate a Certificate Signing Request (CSR). This CSR provides the Certificate Authority (CA) with the necessary public key and identity information for signing.
Installing Root CA and intermediate CA certificates is done after receiving the signed certificate from the CA, not before providing information to the CA for signing.
Generating a Certificate Signing Request (CSR) on the Cisco ISE appliance creates a file containing public key information and identity details specific to the ISE node, which is then submitted to the Certificate Authority (CA) for signing. The CA uses this information to issue a trusted certificate back to the ISE appliance.
Downloading an intermediate server certificate is not a step to provide information from the appliance to the CA; it's a step to obtain CA certificates from the CA or a trust store.
Downloading the CA server certificate is done after the CA issues the certificate, or to establish trust in the CA on ISE, not to provide appliance information to the CA for signing.
Concept tested: Cisco ISE Certificate Management - CSR Generation
Source: https://www.cisco.com/c/en/us/td/docs/security/ise/3-0/admin_guide/b_ise_admin_guide_3_0/b_ise_admin_guide_30_chapter_0110.html#task_AB18197771F84034873DFBE3D0B0A3AE
Topics
Community Discussion
No community discussion yet for this question.