ACAS scan on cisco prime 3.6 Plugin: 51192 SSL Certificate Cannot Be Trusted Medium

Eric R. Jones · ‎08-25-2019

Our IA department was doing scans and they got a hit on a plugin.

Our SSL Certificate is a third party trusted CA and until now we have had no issues.

Has anyone had this finding appear?

ej

marce1000 · ‎08-26-2019

- This means that the Prime host has an untrusted SSL certificate, indicating the certificate is either expired, self-signed, or signed by an 'unknown' authority. The output of plugin 51192 will include the certificate details, which you might examine and or forward to CISCO TAC.

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

Eric R. Jones · ‎09-25-2019

Hello, It turns out the device wasn't the issue at all. I did more sleuthing and on the previous ACAS scans and it wasn't a problem until the new signatures for ACAS came out and the team didn't update them. So it's a false positive right now.

ej