A network administrator is configuring a secondary cisco ISE node from the backup configuration of the primary cisco ISE node to create a high availability pair. The Cisco ISE CA certificates and…

The correct answer is B. application configure Ise. The Cisco ISE CA (Certificate Authority) certificates and private keys cannot be exported through the standard GUI backup process-they require a separate manual backup using the ISE CLI command 'application configure ise'. Running this command launches an interactive menu that…

Architecture and Deployment

Question

A network administrator is configuring a secondary cisco ISE node from the backup configuration of the primary cisco ISE node to create a high availability pair. The Cisco ISE CA certificates and keys must be manually backed up from the primary Cisco ISE and copied into the secondary Cisco ISE. Which command most be issued for this to work?

Options

Acopy certificate Ise
Bapplication configure Ise
Ccertificate configure Ise
DImport certificate Ise

How the community answered

(53 responses)

A
13% (7)
B
75% (40)
C
8% (4)
D
4% (2)

Explanation

The Cisco ISE CA (Certificate Authority) certificates and private keys cannot be exported through the standard GUI backup process-they require a separate manual backup using the ISE CLI command 'application configure ise'. Running this command launches an interactive menu that includes an option to export the ISE CA certificates and keys (Option 7: Export Cisco ISE CA certificates and keys). The resulting file must then be securely transferred and imported into the secondary ISE node using the same 'application configure ise' command (import option). This step is mandatory when building an HA pair from a primary node backup to ensure the secondary node can perform CA functions.

Topics

#Cisco ISE#High Availability (HA)#Node Configuration#Certificate Management

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice