topic Guest Portal Certificate Error only on Android Devices in ISE 2.4 patch 7 or later in Network Access Control

Guest Portal Certificate Error only on Android Devices in ISE 2.4 patch 7 or later

ajtm — Tue, 16 Jul 2019 12:12:45 GMT

ISE 2.4 patch 7, 8 or 9

Guest Portal with wildcard certificate signed by public CA (COMODO) - everything works fine in IOS devices and Windows browsers (Chrome, Firefox, IE...) but in Android devices we receive untrusted certificate error.

ISE 2.4 patch 5 or 6

Everything works fine in all tested platforms and browsers.

Re: Guest Portal Certificate Error only on Android Devices in ISE 2.4 patch 7 or later

Jason Kunst — Tue, 16 Jul 2019 21:10:13 GMT

please open a tac case as this is a break fix and needs to be root caused, a bug open, etc
https://community.cisco.com/t5/security-documents/how-to-ask-the-community-for-help/ta-p/3704356

Re: Guest Portal Certificate Error only on Android Devices in ISE 2.4 patch 7 or later

ajtm — Wed, 17 Jul 2019 23:02:23 GMT

I will do that. Only a small correction, it is patch 8 or later, patch 7 works fine.

Re: Guest Portal Certificate Error only on Android Devices in ISE 2.4 patch 7 or later

scott.stapleton — Thu, 18 Jul 2019 14:55:52 GMT

I'm also hitting this issue on Android and Chrome, 2.4 patch 9.

I'll be interested to hear what you find.

Re: Guest Portal Certificate Error only on Android Devices in ISE 2.4 patch 7 or later

scott.stapleton — Thu, 18 Jul 2019 16:12:36 GMT

More info: https://community.cisco.com/t5/cisco-bug-discussions/cscut26025-doc-ise-certificate-chain-is-not-being-send-till/m-p/3879470

Re: Guest Portal Certificate Error only on Android Devices in ISE 2.4 patch 7 or later

ajtm — Fri, 19 Jul 2019 15:05:34 GMT

CSCvp75207 workaround is working fine but I’m afraid of the security consequences.