Replace an expiring cert on IOS-XE

[jimmy10]

Hi all,

I need to replace a certificate on an IOS-XE router.

A third party has requested that I provide them a CSR from the router.

How do I go about this?

The router is version 16.06.02.

[Georg Pauwen]

Hello,

what are you looking for exactly ? PKI ?

https://www.cisco.com/c/en/us/td/docs/ios/ios_xe/sec_secure_connectivity/configuration/guide/2_xe/sec_secure_connectivity_xe_book/sec_cert_enroll_pki_xe.html

[jimmy10]

Hi, 

Thanks for the link, I will read it shortly.

It is all setup from last year, I just need to create a CSR to pass to 3rd party so they can provide me with a certificate.

Do I do a CSR based on the old cert, or would it be a brand new cert?

Does that make sense?