...
Application server restart on all nodes in the deployment 1) at the same time after the service on Primary node comes up. - ISE 3.1 2) one by one after the service on Primary node comes up - ISE 3.0 despite information that Application server will be restarted only on the selected node. "Enabling Admin Role for this certificate will cause an application server restart on the selected node"
Replacing Admin certificate for Primary PAN ISE node.
There is no workaround available.
This behavior is described in the admin guide however the warning in ISE GUI is incorrect. "Changing the certificate of the admin role certificate on a primary PAN node restarts services on all other nodes. The system restarts one node at a time, after the primary PAN restart has complete." https://www.cisco.com/c/en/us/td/docs/security/ise/3-0/admin_guide/b_ISE_admin_3_0/b_ISE_admin_30_basic_setup.html#ID547
Click on a version to see all relevant bugs
Cisco Integration
Learn more about where this data comes from
Bug Scrub Advisor
Streamline upgrades with automated vendor bug scrubs
BugZero Enterprise
Wish you caught this bug sooner? Get proactive today.