cisco.ise.bind_signed_certificate – Resource module for Bind Signed Certificate

Note

This plugin is part of the cisco.ise collection (version 1.0.2).

To install it use: ansible-galaxy collection install cisco.ise.

To use it in a playbook, specify: cisco.ise.bind_signed_certificate.

New in version 1.0.0: of cisco.ise

Synopsis

  • Manage operation create of the resource Bind Signed Certificate.

Note

This module has a corresponding action plugin.

Requirements

The below requirements are needed on the host that executes this module.

  • ciscoisesdk

Parameters

Parameter Choices/Defaults Comments
admin
boolean
    Choices:
  • no
  • yes
Use certificate to authenticate the ISE Admin Portal.
allowExtendedValidity
boolean
    Choices:
  • no
  • yes
Allow import of certificates with validity greater than 398 days.
allowOutOfDateCert
boolean
    Choices:
  • no
  • yes
Allow out of date certificates (required).
allowReplacementOfCertificates
boolean
    Choices:
  • no
  • yes
Allow Replacement of certificates (required).
allowReplacementOfPortalGroupTag
boolean
    Choices:
  • no
  • yes
Allow Replacement of Portal Group Tag (required).
data
string
Signed Certificate in escaped format.
eap
boolean
    Choices:
  • no
  • yes
Use certificate for EAP protocols that use SSL/TLS tunneling.
hostName
string
Name of Host whose CSR ID has been provided.
id
string
ID of the generated CSR.
ims
boolean
    Choices:
  • no
  • yes
Use certificate for the ISE Messaging Service.
name
string
Friendly Name of the certificate.
portal
boolean
    Choices:
  • no
  • yes
Use for portal.
portalGroupTag
string
Set Group tag.
pxgrid
boolean
    Choices:
  • no
  • yes
Use certificate for the pxGrid Controller.
radius
boolean
    Choices:
  • no
  • yes
Use certificate for the RADSec server.
saml
boolean
    Choices:
  • no
  • yes
Use certificate for SAML Signing.
validateCertificateExtensions
boolean
    Choices:
  • no
  • yes
Validate Certificate Extensions.

See Also

See also

Bind Signed Certificate reference

Complete reference of the Bind Signed Certificate object model.

Examples

- name: Create
  cisco.ise.bind_signed_certificate:
    ise_hostname: "{{ise_hostname}}"
    ise_username: "{{ise_username}}"
    ise_password: "{{ise_password}}"
    ise_verify: "{{ise_verify}}"
    admin: true
    allowExtendedValidity: true
    allowOutOfDateCert: true
    allowReplacementOfCertificates: true
    allowReplacementOfPortalGroupTag: true
    data: string
    eap: true
    hostName: string
    id: string
    ims: true
    name: string
    portal: true
    portalGroupTag: string
    pxgrid: true
    radius: true
    saml: true
    validateCertificateExtensions: true

Return Values

Common return values are documented here, the following are the fields unique to this module:

Key Returned Description
ise_response
dictionary
always
A dictionary or list with the response returned by the Cisco ISE Python SDK

Sample:
{ "response": { "message": "string", "status": "string" }, "version": "string" }


Authors

  • Rafael Campos (@racampos)