ACAS scan on cisco prime 3.6 Plugin: 51192 SSL Certificate Cannot Be Trusted Medium

[Eric R. Jones]

Our IA department was doing scans and they got a hit on a plugin.

Our SSL Certificate is a third party trusted CA and until now we have had no issues.

Has anyone had this finding appear?

ej

[marce1000]

 - This means that the Prime host has an untrusted SSL certificate, indicating  the certificate is either expired, self-signed, or signed by an 'unknown' authority.  The output of plugin 51192 will include the certificate details,  which you might examine and or forward to CISCO TAC.

 M.

[Eric R. Jones]

Hello, It turns out the device wasn't the issue at all. I did more sleuthing and on the previous ACAS scans and it wasn't a problem until the new signatures for ACAS came out and the team didn't update them. So it's a false positive right now.

ej