Wednesday, August 4, 2021

Cisco ISE NTP Keys - SHA256/SHA512

Has anyone been able to get Cisco ISE working with NTP keys other than MD5? I've been trying to get SHA256 or SHA512 keys working, but ISE never syncs when using those keys. I'm on ISE 2.7 and the upstream NTP box is a Microchip S650 on the latest version. I don't see any reason why it can't work. I'm guessing the issue is the version of the NTP daemon ISE uses just doesn't fully support it.

TAC has been less than helpful, but mainly because I can't do a Webex, which breaks their workflow and makes it impossible to get anything done with them.



No comments:

Post a Comment