How to renew a infrastructure trusted cert

[chris.jones]

I'm new to ISE, running 2.2, and need to renew my trusted "infrastructure" cert, can I get some help with this, thanks

Chris

[hslai]

We should be able to import it to overwrite the existing one.

[chris.jones]

I’m sorry but have almost no experience with certs, this is I believe, just root cert renewal but don’t have a clue, thanks.

[hslai]

I am assuming a root certificate for a 3rd-party PKI, then It would be the same as how it imported previously. Simply get a copy of the certificate in PEM format from the 3rd-party PKI, then go to ISE admin web UI [Administration > System > Certificates > Trusted Certificates] and use [ Import }. After selecting the PEM file, ensure selecting this option:

[x] Trust for authentication within ISE