CISCO ISE 3.1 - 3.4 Trusted Certificates

[besart-rexhepi]

Hi,
I need to upgrade my ISE 3.1 (latest patch) to 3.4
I have 2 nodes 

My question is what do I do with expired Trusted Certificate?
Will upgrade fail if I have expired trusted certificate? My system Certificate is all valid.
I dont know what all certificates under trusted are used for because they where there from start..

See the image below

[PSM]

@besart-rexhepi Don't think that expired certificates in trust store will cause upgrade to fail. Although health check from GUI will show warning for that. But it is good practice to clean the expired and unused certificates before upgrade. Since these certificates are already expired any service which is using these certs probably already impacted. You should investigate the use of these and do the clean up.