Requirements of Generating Single Certificate in Cisco ISE

BE.

To generate a single certificate in Cisco ISE by using a certificate provisioning portal, without generating a certificate signing request, there are two requirements:

1. Enter the common name: The common name is the fully qualified domain name (FQDN) that identifies the device or service for which the certificate is being generated. It must match the hostname that the device uses to identify itself. For example, if the device hostname is "switch1.example.com," the common name in the certificate should also be "switch1.example.com."

2. Select the certificate template: The certificate template determines the format and properties of the certificate that will be generated. The template defines the key length, algorithm, validity period, and other attributes of the certificate. You must select the appropriate template based on the type of device or service for which the certificate is being generated.

The other options listed in the question are not requirements for generating a single certificate in Cisco ISE by using a certificate provisioning portal.

A. Enter the IP address of the device: This is not required for generating a certificate, as the common name is used to identify the device.

C. Choose the hashing method: This is determined by the certificate template and does not need to be selected separately.

D. Locate the CSV file for the device MA: This is only required if you are importing a list of devices to generate certificates for, and is not necessary for generating a single certificate.

Therefore, the correct answers are B (Enter the common name) and E (Select the certificate template).