ISE Unknown Trusted Certificates

[OrkhanRustamli]

Hey all,

I have a ISE in fabric domain integrated with DNAC. 

In ISE I see 2 strange certificates which one of them is going to expire. I am not sure the usage purpose of these certificates because they were not installed by me. I wonder whether this is related to DNA Center?

Any help is appreciated.

Thanks in advance!

[Mike.Cifelli]

AFAIK these are related to DNAC. My assumption is that CA service is running, and ISE should issue a new cert via your pxgrid connection automatically. My recommendation is to go to: Administration->Certificates->CA->Issued Certs in ISE. This may better assist you with figuring out what template was used/validity/etc. In theory you could potentially increase the validity OR get an issued cert from your actual PKI. Good luck & HTH!