Guest

Preview Tool

Cisco Bug: CSCut58228 - Samsung Android devices fail to install certificates for BYOD EAP-TLS

Last Modified

Feb 22, 2018

Products (1)

  • Cisco Identity Services Engine (ISE) 3300 Series Appliances

Known Affected Releases

1.3(0.876)

Description (partial)

Symptom:
Samsung Android Devices running different version of Andoid 4.X fail to provision BYOD with EAP-TLS with an error "Unable to install the certificate. Exit the application and run it again to continue the installation."

SPW.log located in the "downloads" folder of the android device show:
2015.03.25 17:00:06 INFO:State :EXCEPTION message :Unable to install the certificate. Exit the application and run it again to continue the installation.
2015.03.25 17:00:06 INFO:Internal system error.

Clients are unable to finish the BYOD flow successfully.

NON Samsung devices running the same version of Android do not experience this problem

Conditions:
ISE 1.3

Network Setup assistant 1.2.42 from Android App Store

BYOD flow provisions Android devices with EAP-TLS via SCEP from internal ISE CA or External SCEP server.

Network Setup Assistant gives error: "Unable to install the certificate. Exit the application and run it again to continue the installation."
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.