Trusted certificates expired CISCO ISE 2.4 Patch 14

[victormanuelsolis]

Hello Guys,

I need to know if the below EXPIRED Trusted certificates can affect on the Cisco ISE upgrade from 2.4 to 2.7, plus, how can I renew them, currently I have the 2.4 version with patch 14. Thanks in advance.

[ahollifield]

Why not upgrade to 3.1 or 3.2? 2.7 has an EOL announced.

[victormanuelsolis]

At this moment we cannot upgrade to 3.0 or 3.1 due the cost of licenses, obviously we must to upgrade to that version, but it will be on next year, now the main stopper or doubt is the self-signed certificate on Trusted store, Idk if it will cause the upgrade to 2.7 fails

[hslai]

The two well-known CA certificates are no longer used by ISE services so should be safe to delete.

On DST Root CA X3 Certificate Authority, see CSCvy89317

On VeriSign Class 3 Secure Server CA, see Cisco Community / Technology and Support Security / Network Access Control / Re: [ISE 2.3.7] How to renew the 'VeriSign Class 2 Secure Server CA - G3 in Trusted Certificates.  

[victormanuelsolis]

Thank you!