Guest

Preview Tool

Cisco Bug: CSCul69023 - SCEP does not proceed with Apple iphone/ipad on ISE 1.2

Last Modified

Aug 21, 2018

Products (1)

  • Cisco Identity Services Engine

Known Affected Releases

1.2(0.807)

Description (partial)

Symptom:
After upgrade to ISE 1.2, Apple Iphone and IPAD do not proceed with SCEP certificate provisioning. When the ISE presents its certificate the Apple device does not continue with the SCEP request. The problem only happens with Apple iOS devices, Android is not affected. The following error is seen on iphone/ipad "the registration Authorities response is invalid"

Conditions:
The problem only happens with Apple iOS devices, Android is not affected. 
The problem only happens with Iphone/Ipad when Digicert public certificates are used on ISE.
The problem on happens after ISE has been upgraded to 1.2.

Related Community Discussions

Recommended Public CA for ISE BYOD Deployment
Hi, Currently deploying ISE for BYOD and encountering issues with Go Daddy Cert. TAC and software escalation team identified that the issue is due to Go Daddy CA being cross-signed causing issues with apple and android devices. Do we have any recommended Public CA? Or at least someone that's been already tested to be working seamlessly with ISE for BYOD? Thanks, Mark
Latest activity: Aug 15, 2017
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.