[Solved] Cisco ISE duplicate certificate error message when updating the certificate with the same name

“Overview”

Cisco ISE is used to control network access using different methods of authentications for wired and wireless end point devices. It is deployed to large  number of firms for end point security.

The structure consists for Admin and policy nodes and can also live all on the same box for smaller organizations. Each nodes is secured with certificates for secure HTTPS communications and other services within Cisco ISE.

“Problem”

The issue comes up when you are trying to update the certificate when it is expired or going to expire. below is the error message you will get when you are trying to replace the certificate with the same name.

Clicking “OK” should let you update the certificate, however it does not and will take you back to the same screen.  It could be different with different ISE versions, This applies to Cisco ISE 2.4

“Solution”

Here are step by step instructions on the workaround

1. Login into the “Cisco ISE portal”
2. Go to “Administrations”
3. Go to “Certificate Signing Requests”
4. Create a new Certificate signing Request and choose the “Node Name” if more than one node in your environment
5. Choose the “multi-use” options and add the company details
6. Save the file and click on export and this will save the file in the download folder
7. Open the file and copy the text
8. Rekey the certificate with the certificate provider on their portal to renew the certificate
9. Once the new certificate is updated- download it
10. Go to “Administrations” and “certificates”  and bind the certificate and assign the services that you need it tied to the certificates and if that works that should be it