Import the root and intermediate certificates into the ISE trust store.
Generate a certificate signing request (CSR) on Cisco ISE.
Copy and paste the CSR to the issuing CA
Rename the file and bind it to the pending CSR in ISE.
Public Key Infrastructure (PKI) Basics #4 – Integrating Cisco ISE into the PKI