topic Re: How to Export Certificates from ISE using CLI in Network Access Control

How to Export Certificates from ISE using CLI

RSundstrom — Fri, 21 Feb 2020 18:58:25 GMT

I have a two node ISE deployment at version 1.4. I will be performing an upgrade to the version soon and my research has found that I need to perform a backup of my certificates and keys using the CLI.

I have searched the forums and general internet with no luck. Can someone tell me how to export my certificates and keys using the CLI in ISE?

Thank you,

Re: How to Export Certificates from ISE using CLI

ajc — Wed, 13 Jun 2018 21:36:40 GMT

You can export it from GUI. See next

Re: How to Export Certificates from ISE using CLI

ajc — Wed, 13 Jun 2018 21:40:25 GMT

Re: How to Export Certificates from ISE using CLI

Rob Ingram — Wed, 13 Jun 2018 22:05:04 GMT

Hi,
You appear to only be able to export the Internal ISE CA store certificates via the CLI, you possibly aren't using them, unless you are using ISE CA to distribute certificates to clients/devices.

As Abraham advised you'll have to backup the Admin, EAP, Portal etc certificates via the WebGUI.

HTH

Re: How to Export Certificates from ISE using CLI

RSundstrom — Mon, 18 Jun 2018 19:44:34 GMT

I was not aware that I could export all of my certificates/keys from the UI.

I just completed exporting all of them so it works well.

Thank you!

Re: How to Export Certificates from ISE using CLI

David Rollins — Fri, 08 Oct 2021 20:28:24 GMT

You can also try the application configure "application name" cli command. It comes up with the following command menu:

Then chose option 7

Selection configuration option
[1]Reset M&T Session Database
[2]Rebuild M&T Unusable Indexes
[3]Purge M&T Operational Data
[4]Reset M&T Database
[5]Refresh Database Statistics
[6]Display Profiler Statistics
[7]Export Internal CA Store
[8]Import Internal CA Store
[9]Create Missing Config Indexes
[10]Create Missing M&T Indexes
[11]Enable/Disable ACS Migration
[12]Generate Daily KPM Stats
[13]Generate KPM Stats for last 8 Weeks
[14]Enable/Disable Counter Attribute Collection
[15]View Admin Users
[16]Get all Endpoints
[17]Enable/Disable Wifi Setup
[18]Reset Config Wifi Setup
[19]Establish Trust with controller
[20]Reset Context Visibility
[21]Synchronize Context Visibility With Database
[22]Generate Heap Dump
[23]Generate Thread Dump
[24]Force Backup Cancellation
[25]CleanUp ESR 5921 IOS Crash Info Files
[26]Configure TCP params
[27]Recreate undotablespace
[28]Fetch SGA/PGA Memory usage
[0]Exit

It is going to ask you to name a repository and encryption password, so be prepared.

Re: How to Export Certificates from ISE using CLI

sb_westoaks — Tue, 15 Oct 2024 09:26:39 GMT

how did you do this I can only see the option to export individuals on ise 3.0?