cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1104
Views
0
Helpful
1
Replies

ISE root and intermediate cert

Hi folks, 

 

not really sure if this is the right place or not, seeking for your assistance on this matter, 

 

we have a pretty old ISE running 2.0

 

so we have started getting alerts of an intermediate certificate authority:

 

Intermediate certificate authority
Expires : Mon, 12 Apr 2021 12:32:04 PDT

Certificate is going to expire within 60 days

 

Root certificate authority
Expires : Tue, 18 Mar 2036 12:20:18 PDT

Certificate status is good
 
The root, based on the hostname, it is being used for all PSN nodes, 
 
so my question is, do I need to renew this intermediate certificate ? or does not matter? 
in case I need to renew it, is the same process of renewing the root CA? or do I need to renew the root as well? 
can someone give some lights please?
 
a couple of notes I have seen:
 
the root CA is installed in the PC, 
expiration date: Expires : Tue, 18 Mar 2036
 
 
 
 

 

 

1 Reply 1

Mike.Cifelli
VIP Advisor VIP Advisor
VIP Advisor

First, I strongly recommend upgrading your ISE cluster.  Second, take a peek at the following as it should help: How To Implement Digital Certificates in ISE - Cisco Community

HTH!

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers