ISE 2.6 Alarms: Certificate Expired

[PradeepkumarPalani2405]

On the ISE Dashlet started seeing the below alarm even though the node was removed long ago.

We have tried restarting the Application ISE but no luck.

Please input is there a way to flush the cache?

[Mike.Cifelli]

If that certificate is no longer in use you can remove it from ISE by going to Administration->System->Certificate Management->Trusted Certificates. HTH!

[PradeepkumarPalani2405]

@Mike.Cifelli  Thanks for your response, unfortunately the certs are not listed under Administration->System->Certificate Management->Trusted Certificates.

So I thought I try to restart the Application ISE but the did not help!

[Marvin Rhoads · Accepted solution]

If the GUI doesn't expose the expired trusted certificate you should open a TAC case. They can install the root patch and go into the cli shell to manually remove the object(s) from the database. I recently had to do the same for an LDAP identity source.

[PradeepkumarPalani2405]

---

@Marvin Rhoads wrote:

If the GUI doesn't expose the expired trusted certificate you should open a TAC case. They can install the root patch and go into the cli shell to manually remove the object(s) from the database. I recently had to do the same for an LDAP identity source.

---

Thanks for your valuable input, appreciates.

[Surendra]

You might want to look at Administration > System > Certificates > Trusted Certificate store. Looks like it’s a certificate in there that has expired.

[PradeepkumarPalani2405]

It doesn't have the certificate under trusted certificate store, however I opened a TAC case to delete the cert through root access, will keep you posted.

[Jetpack]

I was wondering if the TAC case resolved this?