cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

6385
Views
5
Helpful
5
Replies
RSundstrom
Beginner

How to Export Certificates from ISE using CLI

I have a two node ISE deployment at version 1.4. I will be performing an upgrade to the version soon and my research has found that I need to perform a backup of my certificates and keys using the CLI.

I have searched the forums and general internet with no luck. Can someone tell me how to export my certificates and keys using the CLI in ISE?

Thank you,

1 ACCEPTED SOLUTION

Accepted Solutions
ajc
Rising star
Rising star

5 REPLIES 5
ajc
Rising star
Rising star

You can export it from GUI. See next

 

 

ajc
Rising star
Rising star

 

 

export1.pngEXPORT2.pngexport3.png

I was not aware that I could export all of my certificates/keys from the UI.

I just completed exporting all of them so it works well.

 

Thank you!

Rob Ingram
VIP Expert

Hi,
You appear to only be able to export the Internal ISE CA store certificates via the CLI, you possibly aren't using them, unless you are using ISE CA to distribute certificates to clients/devices.

As Abraham advised you'll have to backup the Admin, EAP, Portal etc certificates via the WebGUI.

HTH
David Rollins
Beginner

You can also try the application configure "application name" cli command. It comes up with the following command menu:

Then chose option 7

Selection configuration option
[1]Reset M&T Session Database
[2]Rebuild M&T Unusable Indexes
[3]Purge M&T Operational Data
[4]Reset M&T Database
[5]Refresh Database Statistics
[6]Display Profiler Statistics
[7]Export Internal CA Store
[8]Import Internal CA Store
[9]Create Missing Config Indexes
[10]Create Missing M&T Indexes
[11]Enable/Disable ACS Migration
[12]Generate Daily KPM Stats
[13]Generate KPM Stats for last 8 Weeks
[14]Enable/Disable Counter Attribute Collection
[15]View Admin Users
[16]Get all Endpoints
[17]Enable/Disable Wifi Setup
[18]Reset Config Wifi Setup
[19]Establish Trust with controller
[20]Reset Context Visibility
[21]Synchronize Context Visibility With Database
[22]Generate Heap Dump
[23]Generate Thread Dump
[24]Force Backup Cancellation
[25]CleanUp ESR 5921 IOS Crash Info Files
[26]Configure TCP params
[27]Recreate undotablespace
[28]Fetch SGA/PGA Memory usage
[0]Exit

 

It is going to ask you to name a repository and encryption password, so be prepared.

Create
Recognize Your Peers
Content for Community-Ad

ISE Webinars


Miss a previous ISE webinar?
Never miss one again!

CiscoISE on YouTube