topic Importing Certificate Issue in Network Access Control

Importing Certificate Issue

mhoer — Wed, 16 Aug 2023 03:26:14 GMT

Our Guest Portal Certificate expires in 2 weeks, so I went to update to the new certificate tonight.
It is a wildcard cert that we use for the guest portal only.Have done this before several times without issues

So i go to import the new cert in the GUI,

-select the certificate PEM file
-select the key file
-enter the password
-enter friendly name
-check allow wildcard certs
-Set the portal tag
-click submit.

All that happens is the screen flash black fast, A Saving box pops up briefly and then nothing else happens.

Ive tried multiple browsers
Ive rebooted both ISE nodes and still no luck

Any ideas, thoughts or suggestions?

Running 3615 Appliance ISE 2.6 Patch 3 (Upgrading to 3.x soon) Just renewing our certs before hand

Re: Importing Certificate Issue

Ambuj M — Wed, 16 Aug 2023 05:12:53 GMT

tried incognito ? also get to latest patch at least you will need to do it anyways before upgrade to 3.X.

Re: Importing Certificate Issue

balaji.bandi — Wed, 16 Aug 2023 06:05:27 GMT

follow below guide works for me all time even older version.

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/217191-configuration-guide-to-certificate-renew.html

Note : is this public signed cert or Local CA ? - you need to upload full chain certs if the certificate new provider not signed by Public authority.

Re: Importing Certificate Issue

ahollifield — Wed, 16 Aug 2023 12:12:07 GMT

2.6 Patch 3 is ancient at this point I would update to the latest 2.6 Patch and try again. Also be sure to fast track that upgrade to 3.2 or 3.3.

https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/bulletin-c25-2503911.html

Re: Importing Certificate Issue

mhoer — Wed, 16 Aug 2023 12:43:43 GMT

I'll look into that, will will probably apply Patch 12 tonight and then try.

Its a public Entrust Cert and I have the Root and Intermediate Certs installed