Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Secondary ISE cannot join the primary node with error message

Hi,

I have just installed the secondary ISE and did the followings, but when I try to join the primary node, I received the Cannot authenticate the primary ISE, please check the server or certificate and try again.

- promote the secondary from standalone to primary

- export self cert from the seconary

- import the cert to the primary

- try to add not on the secondary used both IP and host name with super admin user

One thing I have noticed that the instruction on the ISE 1.1.1 import cert on primary section mentioned:

  1. Choose Administration > System > Certificates.
  2. From the Certificate Operations navigation pane on the left, click Certificate Authority Certificates.

but the Certificat Authority Certificates does not exist on the left pane. I choosed Certificate store instead

ise.png

any suggestions?

1 ACCEPTED SOLUTION

Accepted Solutions

Secondary ISE cannot join the primary node with error message

Hi,

Did you set the secondary node to primary? You may have tried to register the node in the wrong direction. For a node to register with the primary node, the registration request must be initiated from the primary node.

Thanks,

Tarik Admani
*Please rate helpful posts*

Tarik Admani *Please rate helpful posts*
8 REPLIES
New Member

Secondary ISE cannot join the primary node with error message

I've seen that order to be different on the cert guide aswell.

Make sure that the admin password matches

New Member

Secondary ISE cannot join the primary node with error message

Yes. Admin password is match. I have also tested to using a different super admin user created on both system. none of them working

New Member

Secondary ISE cannot join the primary node with error message

do you have both certs on the primary node as of right now?

if you go to

Administration > System > Certificates

choose Certificate Store

what do you see there?

.

New Member

Re: Secondary ISE cannot join the primary node with error messag

Yes. I have two certs there, one is local/primary the other one is imported from the secondary

New Member

Re: Secondary ISE cannot join the primary node with error messag

I'm sorry, you do or don't see two certs there?

New Member

Secondary ISE cannot join the primary node with error message

I tried to add the cert from primary and imported it into the secondary. Run add note again, get different error:

Unable to register primary_host. Node is not a Standalone node.

Secondary ISE cannot join the primary node with error message

Hi,

Did you set the secondary node to primary? You may have tried to register the node in the wrong direction. For a node to register with the primary node, the registration request must be initiated from the primary node.

Thanks,

Tarik Admani
*Please rate helpful posts*

Tarik Admani *Please rate helpful posts*
New Member

Secondary ISE cannot join the primary node with error message

Thanks,  Tarik:  that's It.

1655
Views
0
Helpful
8
Replies