I can't speak to ISE specifically. But as for the future activation date, my guess is you'll have no problem installing the cert. Just make sure you don't try to use it before the activation date because it's probably not going to work. Regarding the CSR/private key issue, that's just how certs work. The servers use their devices current private key to create the request, so if you use a CSR from the server the cert will use the same private key. If you generate a CSR in openSSL, you'll be using a different private key, so you'll have to tell the server what that Private key is. It's no problem. Your cert authority will offer you a package that includes the private cert. Just install that on your server.
From: The EDUCAUSE Wireless Issues Community Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> On Behalf Of Bruce Boardman Sent: Tuesday, April 20, 2021 8:17 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: [WIRELESS-LAN] ISE CERT Renewal We are going through Sectigo to renew RADIUS CERT for our 802.1x auth. environment. Cisco is a little bit nebulous regarding the activation and acceptance of the CERT with a future CERT valid date. The are not clear if the renewal will take without a CSR (why is a question to Cisco), but they indicate that in that case the private key may need to be uploaded. I don't want to get to the expiration day to find out that the CERT needs to be reissued, which would be a lengthy outage for machine auth clients needing a push of the new CERT. Anybody renewed on ISE prior to the expiration of the existing CERT using a future CERT valid date? Talk me off the ledge. Thanks ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Ccae104%40PSU.EDU%7C7b0feeae24084640a1e408d903f63611%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C637545178272898517%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=8jnM6MxitGtoScL5rdSKdBE%2FxrJgucDWZA0CVUoTw%2FQ%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
