ise cert renwel

[wyfy-2015]

Hi,

ise two nodes primary seconary . Wants to renew the certificate . single certificate is using for eap auth( multi use ) .
What is the procedure to renew it .

What will happen to the eap clients ( windows machines,iphone ,android  ) 

2 ) Can I use the single certificate ( not wild card ) if I add the secondary ise fqdn as SAN ?

Thanks

[Mohammed al Baqari]

You can use single certificate. You need to import the certificate on the
primary node. Once it restarts, you need to repeat that on secondary node.

Before proceeding with this, make sure that you have your certificate
pushed to all your EAP clients. Both certs should be installed before
starting.

Active EAP sessions won't be impacted but it will impact sessions trying to
connect during that window

[wyfy-2015]

Hi,
" Before proceeding with this, make sure that you have your certificate
pushed to all your EAP clients. Both certs should be installed before
starting. "
I am using public ca for eap instead of internal ca , In that case I hope that it would not be a problem .
Single certificate ( not wildcard ), How it is possible with two nodes ?
Thanks