Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi Team,
I need to replace an intermediate CA (subordinate CA certificate) in the chain, which is simultaneously used for admin and eap roles. The intermediate CA certificate was unfortunately renewed in a way, that the existing certificate with the...
Hi experts,
I have a performance issue with my LDAP query against an rather big AD, where currently my search base DN is set to the root of the LDAP tree. The issue I have that now and then the query´s take awfully long which is somehow logical as...
Was this condition 'CERTIFICATE:Days to Expiry' removed from ISE in the 3.x versions? I´m running 3.2 P8 and the condition cannot be used/found anymore in the condition builder. Picture attached.
HI @LRATS ,
No, indeed there was no problem with the clients, which got the certs issued by the "old" intermediate CA. But i only have a clean Windows environment where the clients are sending the complete chain. I assume you could run into an issue...
Hi @REJR77, As a matter of fact, i had to get new certs for all ISE nodes, signed by the new intermediate CA cert to use those new certs then for EAP and Admin roles... Hope this helps.
Hey Milos,
tnx for your valuable input. I totally agree with you, that only setting up a separate new intermediate CA will be a feasible solution and then issue new ISE certs one by one and also replace them one by one. Of course the new intermediat...
hi,
tnx for the reply, but i already stumbled on an issue in step 1. When i try to import the new intermediate cert, ISE of course sees that nearly everything in the cert is the same and does not allow to import it, but wants to replace the curren...
