Import system certificate without the private key file (ISE)

[ghermocilla]

Hi,

We reimage our ISE, but unfortunately we only backup the certificate without the private key.

Now we want to import that certificate but a private key is required.

Is it possible to upload the old certificate without using the private key?

We are using Cisco ISE 2.7

Thanks,

Glen

[Damien Miller · Accepted solution]

Unfortunately not, the way in which public key infrastructure works is that the private key is used to encrypt the communication stream. The public key alone is not enough to accommodate the secure communication. If there is no backup of the private key, then you need a new certificate.