Cisco Bug: CSCuq48588 - Replace cross-signed "thawte Primary Root CA" with its self-signed

Last Modified

Feb 12, 2018

Products (1)

Cisco Identity Services Engine (ISE) 3300 Series Appliances

Known Affected Releases

1.2(0.909) 1.3(0.747)

Description (partial)

Symptom:
TLS certificate provisioning for Apple iOS devices failing because the endpoints installing "Thawte Premium Server CA" instead of "thawte primary Root CA"

Conditions:
"thawte primary Root CA" imported in ISE is cross-signed by "Thawte Premium Server CA". And, ISE PSN nodes are using a certificate signed by Thawte and designated it for HTTPS/SSL use.

View Bug Details in Bug Search Tool Login Required

Why Is Login Required?

Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

Full Description (including symptoms, conditions and workarounds)
Status
Severity
Known Fixed Releases
Related Community Discussions
Number of Related Support Cases

Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.

Learn More About Cisco Service Contracts