Cisco ISE Certificate in use

[rasmus.elmholt]

Hi

I have an ISE server with a certificate that is about to expire, but i cannot see if it is used anywhere.

How do i find out if it is in use or just installed by mistake.

It is installed under trusted certificates and the line reads:

UNI-ISE01-1-CERT

Enabled

Infrastructure

22 DA 17 11 00 02 00 03 4A 65

Users,Tele

Uni-Issuing-CA01

Tue, 17 May 2016

Wed, 17 May 2017

What does the users mean?

Regards

Rasmus

[Arne Bier]

The column that contains 'Users,Tele' is the Subject Common Name of that certificate (i.e. the name of the system that you're trusting)

This certificate is not used for EAP-TLS because it doesn't have the 'Endpoint' trust set.  Therefore you may have this certificate in place to trust other ISE servers in your multi-node deployment?

Check under System Certificates whether you have installed a certificate for Admin usage, and whether that certificate was signed by the same certificate you're asking about in your Trusted Certificates section.

[rasmus.elmholt]

Hi Arne

I dont have multi-node deployment and the certificate is not used for admin access.

I did try to disable it and nothing broke so it is most likely a certificate installed without ever being used.

Regards,