Trusted Certificate expires soon

[kostasthedelegate]

Hello, 

I have a certificate in ISE Trusted Certificates that expires soon. 

I see that it is "Trusted For" Infrastructure. 

Thawte SSL CA#thawte Primary Root CA#00004

Enabled

Infrastructure

xxxxxxxx

Thawte SSL CA

thawte Primary Root CA

Mon, 8 Feb 2010

Sat, 8 Feb 2020

I have also other certificates that are used for Infrastructure. 

My concern is if I could delete it.

How could I check what certificate is used for Infrastructure?

Regards, 

Konstantinos

[Colby LeMaire · Accepted solution]

You would need to check what certificates are used under "System Certificates" for each ISE node.  Then make sure that a CA Trusted Certificate is available for any of the System Certificates that are in use.  If the one you reference is not a Root or Intermediate CA for any of the System Certificates in use, then you can delete it.  If you post a screenshot of your System Certificates in use and the Trusted Certificates, we can take a look at it.

[kostasthedelegate]

Hello Colby,

From my checks indeed it is not used as intermediate or root in the system certificates.
Thanks for the heads up.

Regards,
Konstantinos