Renewing SAML Certs in Distrubuted ISE Environments

[neil.woodhouse]

Self-Signed SAML certificates have expired on all ISE nodes, whilst SAML is not currently in use in the environment the alerts are somewhat irritating.

Try to generate a new Self-Siged SAML cert and it creates fine on the Primary Admin Node but I receive the following error in the GUI

Certificate was added but failed to replicate to the following nodes.

DC1-PD-ISE-P02

DC1-PD-ISE-P03

DC1-PD-ISE-P04

DC2-PD-ISE-P01

DC2-PD-ISE-P02

DC2-PD-ISE-P03

DC2-PD-ISE-P04

If anyone has any advice?

Thanks

[hslai]

AFAIK only the primary ISE node needs a valid system certificate for SAML.

It seems you are hitting an old issue CSCuz59219. The bug might not be visible to you for another day or two, as its release-note enclosure not flagged properly and I just changed it.

[neil.woodhouse]

Unfortunately I still have "Insufficient Permissions to View Bug"

Thanks

Neil