Symptom
Posture update and Profiler feed site connection failure on ISE due to an SSL error.
Conditions
Posture and Profiler Feed certs are replaced with new certs issued by IdenTrust Commercial Root CA 1 Certificate.
if such cert is not on ISE trusted store the communication will fail.
Workaround
In order to resolve this connectivity issue for Posture, Profiler Feed, and Client Provisioning Updates, complete these steps to install the new root certificate chain
1. Choose Administration--> System--> Certificates--> Trusted Certificates and click Import
2. Browse and choose the IdenTrust.crt downloaded from cisco website. Check the "Trust for Authentication of Cisco Services" check box and click Submit.
Further Problem Description
There is no immediate impact for any ISE versions, features will be affected only when the feed site certificates are replaced with new certs issued by IdenTrust Commercial Root CA 1 Certificate .
Workaround can be applied at anytime.
