topic Re: Overwrite when renewing ISE certificates in Network Access Control

Overwrite when renewing ISE certificates

CCC3 — Fri, 26 Jul 2024 04:14:54 GMT

If the same issuing authority only changed the expiration date when renewing the certificate of replication ISE, is it correct to delete and overwrite the existing certificate?

ISE version is 2.7.

And do 2.7 and 3.x work differently?

Re: Overwrite when renewing ISE certificates

MHM Cisco World — Fri, 26 Jul 2024 16:38:12 GMT

check this cisco slides

I know it for wildcard cert. renew but it can apply to all other cert.

Re: Overwrite when renewing ISE certificates

Arne Bier — Tue, 30 Jul 2024 00:24:50 GMT

This is a common question and some time ago, Cisco added this banner below. e.g. in ISE 3.3 they tell you it's permitted

Re: Overwrite when renewing ISE certificates

CCC3 — Tue, 30 Jul 2024 02:17:45 GMT

Although it is based on the ISE installed on the VM, 2.7 confirmed that it was overwritten and the existing certificate was deleted

In 3.2, we have verified that the existing certificate is also left.

Of course, I tested it with the same certificate

I think it's the right move to get overwritten like the result in 2.7 but I'm also wondering if it's the difference between 3.x and 2.x.