Cisco ISE re-bind a request to the signed certificate issued by that authority.

[Marco Noviello]

Hi guys,

there is a way to "re"-bind a request to an already installed certificate.

The point is:

1) create a Certificate Signing Requests on ISE

2) send the CSR to CA

3) receive the certificate from CA

4) bind the certificate to the CSR

5) forget to add the chain to the certificate :-(

So there is a possibility to import the certificate and the chain without the Private Key File (then this is on ISE) ?

Or there is a way to extract the Private Key File stored on ISE?

Regards

Marco

[Colby LeMaire]

You don't need to have the whole chain in one certificate.  You can import the Root CA and Intermediate CA certificates into the Trusted Store.  That is what is meant by having the whole chain.  Just that ISE has the system certificate, Intermediate CA cert that signed/issued it, and the Root CA that owns the Intermediate.