Solved: Re: ISE 2.6 - Can't Renew ISE OCSP Responder Certificates

h.lehnigk · ‎01-10-2022

This menue point to Renew ISE OCSP Responder Certificates is not available. Does anybody had the same issue?

There are no more options a you can find within the picture.

Arne Bier · ‎01-10-2022

I just tried this in ISE 3.0 patch 4 and to my surprise I don't see the usual options to renew the ISE Root CA, or OCSP Responder. The text on that page still mentions those options - but the options are not in the drop-down, as per the link that Marce1000 sent.

I found that quite puzzling - but I wondered whether my setup was to blame - my internal CA was set to Disabled.

Therefore, I enabled it and suddenly the Certificate Signing Request options were available again . So I suspect that's also the problem on your ISE ?

View solution in original post

marce1000 · ‎01-10-2022

- Check if this thread can help : https://community.cisco.com/t5/network-access-control/ise-ocsp-responder-certificate-expiring/td-p/4427030

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

Arne Bier · ‎01-10-2022

Hi @h.lehnigk and @marce1000

I just tried this in ISE 3.0 patch 4 and to my surprise I don't see the usual options to renew the ISE Root CA, or OCSP Responder. The text on that page still mentions those options - but the options are not in the drop-down, as per the link that Marce1000 sent.

I found that quite puzzling - but I wondered whether my setup was to blame - my internal CA was set to Disabled.

Therefore, I enabled it and suddenly the Certificate Signing Request options were available again . So I suspect that's also the problem on your ISE ?