Go back to
642-591 - CANAC - Implementing Cisco NAC Appliance
A CA-signed certificate is returned from the CA authority and the private key on which the CA certificate is based no longer matches the one in the Cisco NAS. What should the administrator do?
Regenerate the certificates based on the FQDN rather than using the service ip address of the NAM
Import the single root CA or intermediate CA to .chain.crt in the admin console
Edit the Certificate files directly in the file system
Reimport the old private key and then install the CA-signed certificate
Want to practice for 642-591 - CANAC - Implementing Cisco NAC Appliance ?