Cisco ACS 5.5 HA & SSL Certificate

[craig-allen]

Hello,

I'm in the process of setting up Primary & Secondary ACS 5.5 servers and need to assign a SSL certificate from our internal CA to each one of the nodes.

Is it possible to generate a CSR with a SAN field?

Regards

[Jatin Katyal]

Unfortunately, with ACS 5.5 you cannot generate a CSR with SAN or DNS of different ACS FQDN's in your network.This feature has been introduced in ISE. However ACS does except the SAN certificate w/ private key file. 

SAN certificate with ISE

http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/user_guide/ise_user_guide/ise_man_cert.html#pgfId-1171325

Regards,

Jatin Katyal