Unable to Disable or Delete an expired Trust Certificate

[Anthony O'Reilly]

Hi,

I have an expired Trusted Certificate that I need to delete. It has expired over 3 years ago.

When I try to deleted it I get the following Disable or Delete of Trust Certificate is not allowed hence it is being referenced by other Trusted Certificates: "Newer Certificate"

I checked the "Newer Certificate" and there is no reference to it.

What is the best way to delete this certificate? I am on ISE version 2.7, patch 6.

[Greg Gibbs · Accepted solution]

If you cannot see any linked certificate in the GUI, there may be a linkage that needs to be cleared directly out of the database. You will need to open a TAC case so they can query the database and remove the linkage directly.

[Anthony O'Reilly]

Thanks, I logged a call with Cisco TAC.

They logged into ISE via SSH and into SQL via root access and deleted the cert after confirming it is not longer in use.