Question

A network administrator has deployed a Sponsored-Guest portal on ISE PSNs that are reachable at guest.company.com. During testing, guests connecting from the CWA redirect see a browser certificate warning when the portal loads, even though a valid, CA-signed wildcard certificate for *.company.com is already installed on the PSNs. The certificate is currently tagged only for EAP Authentication and Admin usage. What must the administrator do to resolve the certificate warning on the guest portal?

Accepted Answer

Assign the Portal Group Tag used by the guest portal to the CA-signed wildcard certificate so the portal presents it during the HTTPS session

Answer

Enable the pxGrid usage role on the wildcard certificate and rebind the portal to the pxGrid interface

Answer

Import the wildcard certificate into the Trusted Certificates store on each PSN and enable 'Trust for authentication within ISE'

Answer

Change the guest portal FQDN to match the PSN node hostname so it aligns with the certificate CN