ISE renewal certificate with CA

[Da ICS16]

Dear Community,

We use ISE 3.1 P6.

ISE integrates with AD.

We are planning to renewal ISE SSL certificate with CA.

There are PCs authentication via dot 1x and MAB. Is there any impact to MAB profiling?

Thanks for advise and supporting.

[Arne Bier]

If you are renewing the ISE Admin certificate, then that node will restart its application services. While the application services are restarted, you should consider that node to be "out of service". That means if the node handles RADIUS requests for MAB/Profiling, then the switch/WLC will not get a response - and if you have another RADIUS server configured on the switch/WLC then that will be tried - and if it's online/reachable, then all is well. 

If you are renewing the ISE EAP certificate, then there is no downtime on that node.