Replacing ISE SSL Cert
1. Generate Renewal in Sectigo.
2. Create CSR in DigiCert Utility, making sure to put the following SAN Names:
isepsn01-ru.husco.com
isepan01-wa.husco.com
isepan01-ww.husco.com
isepsn01-mq.husco.com
isepsn01-pu.husco.com
isepsn01-sh.husco.com
isepsn01-wa.husco.com
isepsn01-ww.husco.com
3. Generate CSR, this will need to be pasted into the Renewed Cert you have in Sectigo. You will need to click Replace to get the email from Sectigo.
Once the certificate has been approved it should take 5-10 minutes to receive an email with download links.
Click on Certificate only, PEM encoded. It comes with a .PEM extension, you may need to rename to .cer
You can now import this into the Digicert Cert Utility, then export with the Private Key if needed.
EXPORT AS KEY FILE APACHE COMPATIBLE, THIS IS CRITICAL, PFX DOES NOT WORK IN THIS INSTANCE.
4. Apply to ISE Portal to each site
Apply the .crt/.cer profile and the .key file, password is not required.