topic Re: ISE CLI Command to check SSL Certificate in Network Access Control

ISE CLI Command to check SSL Certificate

MohanKumar30269 — Thu, 05 Oct 2023 01:58:12 GMT

Hello All,

How to check all ISE SSL certificate expiry dates via CLI.

Regards,

Mohan Kumar

Re: ISE CLI Command to check SSL Certificate

M02@rt37 — Thu, 05 Oct 2023 04:52:16 GMT

Hello @MohanKumar30269,

Please refer here:

https://community.cisco.com/t5/network-access-control/ise-certificate-status-via-cli/td-p/3711164

Re: ISE CLI Command to check SSL Certificate

MohanKumar30269 — Thu, 05 Oct 2023 16:07:28 GMT

Thanks for your reply MO2, I have already reviewed this community thread and the article provided, but that doesn't have any CLI command to check certificate expiry.

Regards,

Mohan Kumar

Re: ISE CLI Command to check SSL Certificate

Greg Gibbs — Fri, 06 Oct 2023 00:59:21 GMT

Correct. The certificates are stored in the application database to which the CLI has no access.

Re: ISE CLI Command to check SSL Certificate

MJ666 — Tue, 12 Mar 2024 08:35:08 GMT

Hi Greg,
PRTG is sending few alarm on several ASA5516 firewalls.

These are SSL-Certifcat alarms.
When I execute sh run, I don't see the line

no ssl trust-point <My_trustpoint>

any cluee?