cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

409
Views
0
Helpful
1
Replies

ISE root and intermediate cert

Hi folks, 

 

not really sure if this is the right place or not, seeking for your assistance on this matter, 

 

we have a pretty old ISE running 2.0

 

so we have started getting alerts of an intermediate certificate authority:

 

Intermediate certificate authority
Expires : Mon, 12 Apr 2021 12:32:04 PDT

Certificate is going to expire within 60 days

 

Root certificate authority
Expires : Tue, 18 Mar 2036 12:20:18 PDT

Certificate status is good
 
The root, based on the hostname, it is being used for all PSN nodes, 
 
so my question is, do I need to renew this intermediate certificate ? or does not matter? 
in case I need to renew it, is the same process of renewing the root CA? or do I need to renew the root as well? 
can someone give some lights please?
 
a couple of notes I have seen:
 
the root CA is installed in the PC, 
expiration date: Expires : Tue, 18 Mar 2036
 
 
 
 

 

 

1 REPLY 1
Mike.Cifelli
VIP Advocate

First, I strongly recommend upgrading your ISE cluster.  Second, take a peek at the following as it should help: How To Implement Digital Certificates in ISE - Cisco Community

HTH!

Content for Community-Ad