best practice for change ISE 2.2 certificate

[jorge.jimenez11]

i had a costumer and this recently change ip address on all his networks so we need to change ISE addressing to, but this ISE use EAP authentication to connect AD so

any help in order to re.certificate this ISE

[Rob Ingram · Accepted solution]

Hi, If you've only changed the IP address then you shouldn't need to change the certificate, unless you also changed the hostname of the servers.

To answer your question, you cannot delete the EAP certificate as it's currently in use. You will have to create a CSR get it signed by the Internal CA and bind this to ISE before you can delete the old certificate. When you create the CSR make sure you select EAP from the drop down box.

HTH

[jorge.jimenez11]

thanks so much, i tested and use the same certificate!