topic Re: Unable to Disable or Delete an expired Trust Certificate in Network Access Control

Unable to Disable or Delete an expired Trust Certificate

Anthony O'Reilly — Mon, 06 Dec 2021 11:36:47 GMT

Hi,

I have an expired Trusted Certificate that I need to delete. It has expired over 3 years ago.

When I try to deleted it I get the following Disable or Delete of Trust Certificate is not allowed hence it is being referenced by other Trusted Certificates: "Newer Certificate"

I checked the "Newer Certificate" and there is no reference to it.

What is the best way to delete this certificate? I am on ISE version 2.7, patch 6.

Re: Unable to Disable or Delete an expired Trust Certificate

Greg Gibbs — Mon, 06 Dec 2021 22:29:26 GMT

If you cannot see any linked certificate in the GUI, there may be a linkage that needs to be cleared directly out of the database. You will need to open a TAC case so they can query the database and remove the linkage directly.

Re: Unable to Disable or Delete an expired Trust Certificate

Anthony O'Reilly — Tue, 07 Dec 2021 14:02:35 GMT

Thanks, I logged a call with Cisco TAC.

They logged into ISE via SSH and into SQL via root access and deleted the cert after confirming it is not longer in use.