Guest

Preview Tool

Cisco Bug: CSCvj06080 - Can not delete old endpoint subCA certificate

Last Modified

Apr 20, 2018

Products (1)

  • Cisco Identity Services Engine (ISE) 3300 Series Appliances

Known Affected Releases

2.2(0.470)

Description (partial)

Symptom:
When administrator deletes old Endpoint Sub CA certificate from ISE internal CA setting. ISE generates following error message and certificate can not be deleted.

"Disable or Delete of Trust Certificate is not allowed hence it is being referenced by System Certificates."

This issue happens only for Endpoint Sub CA certificate. You can delete Root CA certificate, Node CA certificate and OCSP responder certificate.

Conditions:
ISE 2.2 patch 7 or higher is installed.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.