CSCut12983 - Unable to delete certificate with Default Portal Certificate Group tag

[rshoemak]

Is there a workaround if the certificate with the Default Portal Certificate Group tag has expired?  You cannot upgrade ISE to 1.4 with an expired certificate, and if this certificate cannot be removed, there is a different problem.

[ipekshev]

Same problem. Getting an error message on CLI when trying to upgarde to 1.4.

[Yossi Gratziano]

Hi guys, did anyone find a solution to this issue? i can't upgrade because i have an expired certificate.

thanks

[ipekshev]

Hi Yossi,

open a case referencing this bug - https://tools.cisco.com/bugsearch/bug/CSCut12983

Their engineer will connect to your server and manually remove an expired certificate via their root access toolkit. There is no way you can fix this issue yourself.

Regards,

ilya

[Yossi Gratziano]

thanks Ilya