ISE 2.6 DST Root CA X3 Certificate Authority expires September 2021

[ali.rodriguez]

I see that this Certificate is by default in Cisco ISE and there are other ones that are for default.

My question is if some other certificate by default can cover the functionalities of this expiring certificate? If yes, Would there be a difference? Would it be less safe?.

I attach an image where the other certificates that have the same functions as the expiring certificate are located.

When it expires, will these functions be offered by one of the certificates in the image?

Is nessesary to create a new one by my own?

[Marcelo Morais]

Hi @ali.rodriguez ,

 please take a look at: OK to delete DST Root CA X3 Certificate Authority ?.

Hope this helps !!!

[ali.rodriguez]

Thanks, i read it.

So the certificate is not used at all? Or do the other certificates fulfill the functions of this certificate that will expire?

[Marcelo Morais]

Hi @ali.rodriguez ,

 my suggestion ... disable it first, then delete it after a couple of days.

Hope this help !!!