https://community.cisco.com/t5/network-access-control/path-to-regenerate-expired-certificate-for-psn/m-p/5022013#M587509 <P>Change the CSR fields to something that doesn't conflict with an existing certificate.</P> Wed, 21 Feb 2024 14:49:47 GMT ahollifield 2024-02-21T14:49:47Z https://community.cisco.com/t5/network-access-control/path-to-regenerate-expired-certificate-for-psn/m-p/5021631#M587498 <P>One of my PSN node has expired certificate. How can I need to do to change expired certificate? now I can't to generate CSR because of error <STRONG>"You are attempting to generate a CSR whose subject matches the subject of an existing certificate on the same node. This is only permitted when you are replacing a certificate of the same role. Note that the subject is the concatenation of several fields (for example, CN, O, OU, etc.) You can create a unique subject by varying the values in these fields." - BTW I tried to change CN and CSR was generated but I couldn't export it. Maybe it because of "<SPAN>Node not in sync</SPAN>"?</STRONG></P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="dijix1990_0-1708491189412.png" style="width: 400px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/210694i225D3F4853B4385E/image-size/medium?v=v2&amp;px=400" role="button" title="dijix1990_0-1708491189412.png" alt="dijix1990_0-1708491189412.png" /></span></P> <P>&nbsp;</P> <P>Maybe somebody knows how can I perform it wright?&nbsp;</P> Wed, 21 Feb 2024 04:55:06 GMT https://community.cisco.com/t5/network-access-control/path-to-regenerate-expired-certificate-for-psn/m-p/5021631#M587498 dijix1990 2024-02-21T04:55:06Z https://community.cisco.com/t5/network-access-control/path-to-regenerate-expired-certificate-for-psn/m-p/5022013#M587509 <P>Change the CSR fields to something that doesn't conflict with an existing certificate.</P> Wed, 21 Feb 2024 14:49:47 GMT https://community.cisco.com/t5/network-access-control/path-to-regenerate-expired-certificate-for-psn/m-p/5022013#M587509 ahollifield 2024-02-21T14:49:47Z https://community.cisco.com/t5/network-access-control/path-to-regenerate-expired-certificate-for-psn/m-p/5022014#M587510 <P>as I wrote -&nbsp;<STRONG>BTW I tried to change CN and CSR was generated but I couldn't export it.</STRONG></P> Wed, 21 Feb 2024 14:54:55 GMT https://community.cisco.com/t5/network-access-control/path-to-regenerate-expired-certificate-for-psn/m-p/5022014#M587510 dijix1990 2024-02-21T14:54:55Z https://community.cisco.com/t5/network-access-control/path-to-regenerate-expired-certificate-for-psn/m-p/5022019#M587511 <P>What exact error did you receive when you tried to export it?&nbsp; Since this is just a PSN, I would just rebuild it from scratch at this point and rejoin to PAN.</P> Wed, 21 Feb 2024 15:02:23 GMT https://community.cisco.com/t5/network-access-control/path-to-regenerate-expired-certificate-for-psn/m-p/5022019#M587511 ahollifield 2024-02-21T15:02:23Z https://community.cisco.com/t5/network-access-control/path-to-regenerate-expired-certificate-for-psn/m-p/5022023#M587512 <P>I uploaded image&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="dijix1990_0-1708527877677.png" style="width: 400px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/210757i7A12B0BC0DD8BDFF/image-size/medium?v=v2&amp;px=400" role="button" title="dijix1990_0-1708527877677.png" alt="dijix1990_0-1708527877677.png" /></span></P> <P>&nbsp;</P> Wed, 21 Feb 2024 15:04:47 GMT https://community.cisco.com/t5/network-access-control/path-to-regenerate-expired-certificate-for-psn/m-p/5022023#M587512 dijix1990 2024-02-21T15:04:47Z https://community.cisco.com/t5/network-access-control/path-to-regenerate-expired-certificate-for-psn/m-p/5022030#M587514 <P>Yeah I would just rebuild the node from ISO/OVA.&nbsp; It's not worth the time in my experience to continue troubleshooting a PSN.</P> Wed, 21 Feb 2024 15:14:35 GMT https://community.cisco.com/t5/network-access-control/path-to-regenerate-expired-certificate-for-psn/m-p/5022030#M587514 ahollifield 2024-02-21T15:14:35Z https://community.cisco.com/t5/network-access-control/path-to-regenerate-expired-certificate-for-psn/m-p/5022034#M587515 <P>And what about licence? Will it be OK?&nbsp;</P> Wed, 21 Feb 2024 15:17:07 GMT https://community.cisco.com/t5/network-access-control/path-to-regenerate-expired-certificate-for-psn/m-p/5022034#M587515 dijix1990 2024-02-21T15:17:07Z https://community.cisco.com/t5/network-access-control/path-to-regenerate-expired-certificate-for-psn/m-p/5022039#M587516 <P>Yes, licenses are managed by the admin nodes, not the PSNs.</P> Wed, 21 Feb 2024 15:22:22 GMT https://community.cisco.com/t5/network-access-control/path-to-regenerate-expired-certificate-for-psn/m-p/5022039#M587516 ahollifield 2024-02-21T15:22:22Z https://community.cisco.com/t5/network-access-control/path-to-regenerate-expired-certificate-for-psn/m-p/5022041#M587517 <P>Thanks for answering! I want to try use self-signed certificate firstly (it's not using now on this node)&nbsp;</P> Wed, 21 Feb 2024 15:24:12 GMT https://community.cisco.com/t5/network-access-control/path-to-regenerate-expired-certificate-for-psn/m-p/5022041#M587517 dijix1990 2024-02-21T15:24:12Z