topic Certificate expired notification in Network Access Control

Certificate expired notification

kostasthedelegate — Tue, 27 Jul 2021 05:48:35 GMT

Hello,

I have ISE with pxgrid

I have integrated FMC

ISE is CA and issues the certificates

Recently the cert of FMC expired, but we did not see any alert indicating that

I would like to ask if there is a mechanism in order to be alerted when a pxgrid cert is expiring.

Also, the alert should come from ISE or FMC?

What are your thoughts?

Thanks and regards,

Konstantinos

Re: Certificate expired notification

Mike.Cifelli — Tue, 27 Jul 2021 12:38:44 GMT

Also, the alert should come from ISE or FMC?

What are your thoughts?

-For identity certs (in this case the FMC identity cert) the alert should come from FMC. As an FYSA there are several ISE alarms relating to CA/certs (see below) but the certificate expiration/expired alarms are specifically for certs that are/were imported into the ISE trust store. You can see the following ISE alarms here: Administration->System->Alarm Settings. HTH!

Re: Certificate expired notification

kostasthedelegate — Tue, 27 Jul 2021 18:34:42 GMT

Any idea how to create this alert on FMC?