ISE sends the old self-signed certificate instead of the newly one

[rezaalikhani]

Hi all;

Look at the following figure:

As you can see, I replaced the ISE self-signed certificate with my domain-based certificate. But, when I want to connect ISE with a domain joined computer (so, the root CA certificate that ISE uses, also has been installed on that system), ISE advertises its previous self-signed cert:

I am using ISE 3.2 Patch 1 in my lab...

Any ideas?

[balaji.bandi · Accepted solution]

i have not come across any issue before, try remove and re-installing again and test it.

On the end device try delete any old root certs were associated for the old one ?

Note : other option before re-installing - Close the browser - clear the cache and reboot the PC and test it.

[rezaalikhani]

Thanks for your reply;

As you can see in my post, this is not the browser issue, as ISE is advertising its previously self-signed certificate, instead of the newly added certificate.

[Nancy Saini · Accepted solution]

The node on which the certificate is installed is the one handling the authentication request, right? If yes then maybe the change didn't get reflected at the DB level. Can you try reloading the node and check?

[rezaalikhani]

I have reloaded the server several times but the issue persists...

[Dustin Anderson]

I would also try an incognito browser as I have seen the browser not reflect the change even though the cert has changed.

[rezaalikhani]

This is my exact problem...

[rezaalikhani · Accepted solution]

Removing the old cert and re-installing it, solved the issue...