Guest Portal Certificate Error only on Android Devices in ISE 2.4 patch 7 or later

[ajtm]

ISE 2.4 patch 7, 8 or 9

Guest Portal with wildcard certificate signed by public CA (COMODO) - everything works fine in IOS devices and Windows browsers (Chrome, Firefox, IE...) but in Android devices we receive untrusted certificate error.

ISE 2.4 patch 5 or 6

Everything works fine in all tested platforms and browsers.

[Jason Kunst · Accepted solution]

please open a tac case as this is a break fix and needs to be root caused, a bug open, etc
https://community.cisco.com/t5/security-documents/how-to-ask-the-community-for-help/ta-p/3704356

[ajtm]

I will do that. Only a small correction, it is patch 8 or later, patch 7 works fine.

[scott.stapleton]

I'm also hitting this issue on Android and Chrome, 2.4 patch 9.

I'll be interested to hear what you find.

[scott.stapleton · Accepted solution]

More info: https://community.cisco.com/t5/cisco-bug-discussions/cscut26025-doc-ise-certificate-chain-is-not-being-send-till/m-p/3879470

[ajtm]

CSCvp75207 workaround is working fine but I’m afraid of the security consequences.