Certificate expired notification

[kostasthedelegate]

Hello, 

I have ISE with pxgrid

I have integrated FMC

ISE is CA and issues the certificates

Recently the cert of FMC expired, but we did not see any alert indicating that 

I would like to ask if there is a mechanism in order to be alerted when a pxgrid cert is expiring. 

Also, the alert should come from ISE or FMC?

What are your thoughts?

Thanks and regards, 

Konstantinos

[Mike.Cifelli · Accepted solution]

Also, the alert should come from ISE or FMC?

What are your thoughts?

-For identity certs (in this case the FMC identity cert) the alert should come from FMC.  As an FYSA there are several ISE alarms relating to CA/certs (see below) but the certificate expiration/expired alarms are specifically for certs that are/were imported into the ISE trust store.  You can see the following ISE alarms here: Administration->System->Alarm Settings.  HTH!

[kostasthedelegate]

Any idea how to create this alert on FMC?