Cisco Cisco Identity Services Engine Software トラブルシューティングガイド

Contributed by Todd Pula and Sylvain Levesque, Cisco TAC Engineers.
Jul 31, 2013

Introduction
Prerequisites
     Requirements
     Components Used
Background Information
Configure
     NDES Server Certificate Configuration
     NDES Server IIS Binding Configuration
     ISE Server Configuration
Verify
Troubleshoot
Related Information

This document describes the steps required to configure Hypertext Transfer Protocol Secure (HTTPS) support
for Secure Certificate Enrollment Protocol (SCEP) integration with the Identity Services Engine (ISE).

Cisco recommends that you have knowledge of these topics:

Basic knowledge of Microsoft's Internet Information Services (IIS) web server

• 

Experience in the configuration of SCEP and certificates on ISE

• 

The information in this document is based on these software and hardware versions:

ISE Release 1.1.x

• 

Windows Server 2008 R2 Enterprise with hotfixes for KB2483564 and KB2633200 installed

• 

The information in this document was created from the devices in a specific lab environment. All of the
devices used in this document started with a cleared (default) configuration. If your network is live, make sure
that you understand the potential impact of any command.

The information related to Microsoft certificate services is provided as a guide specifically for Cisco Bring
Your Own Device (BYOD). Refer to Microsoft's TechNet as the definitive source of truth for Microsoft
certification authority, Network Device Enrollment Service (NDES), and SCEP related server configurations.