ISE Certificates expiring

[alok_doon]

Hi,

I am getting the following alerts for cert will expire. I am looking for a way to renew these certs but am not able to find where can I renew them.

Trust certificate 'Certificate Services Endpoint Sub CA - XX1#00001' will expire in 21 days : Server=XXX

Trust certificate 'Certificate Services Node CA - XXX#00002' will expire in 21 days : Server=XXX

Trust certificate 'Certificate Services OCSP Responder - XX1#00004' will expire in 21 days : Server=XX

Under the Certificate Signing Request -usage- no options for the above certs.

I have also noticed internal CA Certificate Authority is disabled. Do we have enabled, for certs to be renewed?

Any help would be appreciated.

Thanks

[Udupi Krishna. · Accepted solution]

Enable the certificate authority and remaining options should show up in the drop down menu like below

 

[Mike.Cifelli · Accepted solution]

FYSA this should help: How To Implement Digital Certificates in ISE - Cisco Community