Guest

Preview Tool

Cisco Bug: CSCvv75280 - ISE: Generating Internal CA Root Certificate for ISE Messaging requires PLUS License

Last Modified

Oct 05, 2020

Products (1)

  • Cisco Identity Services Engine

Known Affected Releases

2.6(0.156) 2.7(0.356)

Description (partial)

Symptom:
After an ISE upgrade to 2.6 or above, the Root CA chain may not be correct, because of which ISE messaging cert chains are incomplete. This results in Queue Link Alarms on the dashboard.
In order to fix Queue Link Alarms, the Root CA chain has to be regenerated which gives the error:
"Plus license is out of compliance and trying to generate internal CA operations"

Conditions:
Only base license and related features are used on ISE.
Correspondingly, there is no PLUS license installed or any PLUS license features in use.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.