topic Trusted Certificate expires soon in Network Access Control

Trusted Certificate expires soon

kostasthedelegate — Wed, 05 Feb 2020 10:29:55 GMT

Hello,

I have a certificate in ISE Trusted Certificates that expires soon.

I see that it is "Trusted For" Infrastructure.

Thawte SSL CA#thawte Primary Root CA#00004

Enabled

Infrastructure

xxxxxxxx

Thawte SSL CA

thawte Primary Root CA

Mon, 8 Feb 2010

Sat, 8 Feb 2020

I have also other certificates that are used for Infrastructure.

My concern is if I could delete it.

How could I check what certificate is used for Infrastructure?

Regards,

Konstantinos

Re: Trusted Certificate expires soon

Colby LeMaire — Wed, 05 Feb 2020 14:01:18 GMT

You would need to check what certificates are used under "System Certificates" for each ISE node. Then make sure that a CA Trusted Certificate is available for any of the System Certificates that are in use. If the one you reference is not a Root or Intermediate CA for any of the System Certificates in use, then you can delete it. If you post a screenshot of your System Certificates in use and the Trusted Certificates, we can take a look at it.

Re: Trusted Certificate expires soon

kostasthedelegate — Thu, 06 Feb 2020 06:26:08 GMT

Hello Colby,

From my checks indeed it is not used as intermediate or root in the system certificates.
Thanks for the heads up.

Regards,
Konstantinos