Cisco ISE 1.2 to 1.3 Upgrade Failed - Old Certificates in Cert Store, but can't remove

Hello guys,
My attempt an upgrade bombed out pretty quick due to an expired certificate in the certificate store. However, these certs are disabled because I've never been able to delete them due to the below error as I can not find what they would be attached to. I've looked in SCEP, but I'm not sure where else one should look. This is a distributed deployment, fyi.
Thanks,
Raun

Open a TAC case and for the procedure to remove the certificate.

Similar Messages

I want to upgrade my backup storage space to 10GB but can't. Seems every time I try to "BUY" it never goes anywhere but I notice it is asking An unknown error has occurred. How can I use my re

I want to upgrade my backup storage space to 10GB but can't.
Seems every time I try to "BUY" it never goes anywhere but I notice it is asking me for an unknown error has occurred.
How can I use my regular Apple ID to purchase the upgrade and backup storage space?
Thanks in advance.
Mohd

[email protected] wrote:
I'm reluctant to post apple ID's in a public support forum, and would prefer to deal with this by private email. or phone.
Then contact Apple directly.
This is a user to user technical support forum. No one here has access to manage Apple ID's other than their own.
There is no Apple presence here.

I want to cancel my iCloud upgrade storage in the 45 day period but can't find the Apple contact number?

I want to cancel my iCloud upgrade storage in the 45 day period but can't find the Apple contact number?

It's only a 15 day period, not 45.
If in the US, follow the link below (you must request a refund within 15 days) -
https://discussions.apple.com/message/16968425#16968425
it gives the USA phone number - if you don't live there you will have to find an equivalent number from the 'Contact Us' link at bottom right of this page.

Cisco ISE 1.2 Patch 6 -- 8 Update failed

Hi all,
I wanted to know if any bugs was registered for the cumulative patch 8 for Cisco ISE 1.2 and how to mitigate any patch failures.
Important notice : I though that this error could be an unlucky try but i've tested the update two time.
Indeed, i have three deployment : A Pre-production one, a 4 nodes distributed and a 2 nodes distributed.
The patch works fine on the pre-production one, on the 2 nodes too but fails on the 4 nodes one with a very anormal behaviour.
On the "show nodes status" in Maintenance - Patch manage, i can see that my both PAN are successfully patched and the first PSN too but when the "Patch in progress" appears on the second PSN, the "installed" status is cancelled in the first PSN and become "Patch in progress" so i've two "Patch in progress" in parallel, that is an anormal procedure not discribed by Cisco on the document "Installing a software Patch". (wich discribe a sequential update of all nodes)
The symptoms after this error are :
- Unable to process EAP-TLS authentications ! (CA are stored on the First PAN and seems to be unavailable from PSN to exchange the handshake)
- The Application server try to restart but fails indefinitly even if i try to restart the node (on both PSN)
- GUI Unavailable
- MAB Auth is working
- Endpoint and Endpoint Groups menus are missing on the GUI (I push the MAC Address through the ERS API but it is very strange)
- Logs indicates one first "Patch success" on PAN and a second "Patch failed" still on PAN :(
The task that resolves this issue is to launch the command "patch remove ise 8" on all nodes and everything come back functional.
My big interrogation is that on my two other deployment, the patch was successfull and quick to process.
Thanks for your help.

This is that i did abviously... but the two PSN stay in status "Node down", the application service won't start correctly with these ADE-OS logs entries :
2014-05-28T10:26:30.023223+00:00 XXXXXXX logger: info:[application:operation:appservercontrol.sh] Starting ISE Application Server...
2014-05-28T10:26:30.311676+00:00 XXXXXXX logger: Loading PKCS11 ...
2014-05-28T10:26:30.978432+00:00 XXXXXXX logger: SLF4J: Class path contains multiple SLF4J bindings.
2014-05-28T10:26:30.978454+00:00 XXXXXXX logger: SLF4J: Found binding in [jar:file:/opt/CSCOcpm/appsrv/apache-tomcat-6.0.36/lib/slf4j-log4j12-1.5.8.jar!/org/slf4j/im
pl/StaticLoggerBinder.class]
2014-05-28T10:26:30.978502+00:00 XXXXXXX logger: SLF4J: Found binding in [jar:file:/opt/CSCOcpm/appsrv/apache-tomcat-6.0.36/lib/com.cisco.xmp.osgi.slf4j-log4j12-1.5.
8.PATCHED.jar!/org/slf4j/impl/StaticLoggerBinder.class]
2014-05-28T10:26:30.978509+00:00 XXXXXXX logger: SLF4J: See http://www.slf4j.org/codes.html#multiple_bindings for an explanation.
2014-05-28T10:26:31.638970+00:00 XXXXXXX logger: log4j:WARN No appenders could be found for logger (com.cisco.epm.config.cache.impl.ConfigCacheImpl).
2014-05-28T10:26:31.638992+00:00 XXXXXXX logger: log4j:WARN Please initialize the log4j system properly.

Cant stand the changes to my Maxx HD with the KitKat upgrade, text colors and keyboard terrible. How can I remove the upgrade and go back to what I had?

How can I remove this new Kitkat upgrade and go back to what I had. I cannot deal with the color on text screen and the keyboard is terrible. Can take back all the stupid pictures they added for texting. Just need it back to what it was.

Hasn't any business ever heard of the term.
IF IT AINT BROKE DON'T FIX IT.

Upgraded to Mavericks and installed new iphoto but can't get iphoto to work

I have not been able to open my iphoto library with the current version after installing Mavericks and purchasing/installing iphoto 9.5
Here's the system info: iMac (from Dec. 2007)
2.8 GHz Core duo
4 GB SDRAM
OS X 10.9.1 (as of yesterday)
Iphoto 08 (7.1.5) lived on a network drive ( Lacie cloud drive) shared between a pc and a mac.
Upgraded to 9.5 yesterday
I used time machine backup before installing Mavericks and proceeded to try to upgrade iphoto. However, I did not make a backup of my system after this installation and before I installed the new iphoto. Does Time machine backup iphoto files located on a network drive? Does it matter that the backup was made with snow leopard and not Mavericks?
I followed instructions on a thread indicating that iphoto Library upgrader 1.1 should be used to prepare my old library prior to opening with iphoto 9.5.
When I double-clicked the upgrader it gave me this message:
Your library can open with the current version of iPhoto and does not need to be prepared with this tool.
I noticed that the iphoto icon has already changed from orange to blue.
OK- great! So I go to the freshly installed iphoto and try to open my library and get this message:
The photo library needs to be upgraded to work with this version of iPhoto.
Your photo library will not be readable by previous versions of iPhoto after the upgrade. The upgrade process for very large libraries may take an hour or more to complete.
Alright, so I click the upgrade button and I get the beachball of death for about 15 minutes and then see a message that says:
Examining photo library- Examining with the beachball of death goes on for another 10 minutes and then iphoto just crashes and closes.
Back to searching through threads- Ah- try option + cmd while opening iphoto to rebuild the database but then get this message AGAIN:
The photo library needs to be upgraded to work with this version of iPhoto.
Your photo library will not be readable by previous versions of iPhoto after the upgrade. The upgrade process for very large libraries may take an hour or more to complete.
And so, the cycle continues....
After reading through a few other discussion I discovered that the iphoto library should have been on a drive formated as Mac OS extended (journaled)
So- I format an external harddrive as Mac OS extended (journaled) and proceed to copy the iphoto library (234 GB) onto the external harddrive and after about 30 minutes I received this message:
The operation can’t be completed because an item with the name “iPhoto Library” already exists. I click OK and everything stops and shuts down.
Is it possible to get rid of Mavericks and go back to my original iphoto 08 using the time machine backup? If so, should I then use the upgrader before installing Mavericks and the new iphoto?
At this point I have no clue how to proceed. I am trying not to panic but this process is starting to drive me a little bananas and my brain is slowly, but surely, melting away.
Please help save my sanity. Please.
Thank you.

The problem is the library has been damaged from sitting on the Network Drive, and frankly, returning to the old OS won't change anything, nor will downgrading iPhoto. You're going to have this issue once you try and move the Library, or update it in any way, and - even if you stick with the old version of iPhoto, you're going to start having issues just saving edits, sharing and so on.
So, you're between a rock and a hard place.
I've no idea if TM backs up material on a NAS, but I do know that it can be set to back up externald rives. I'm somewhat surprised that you don't know, as this is your back up system that you created and the easiest route out of this situation. NOw there's only one way to find out.
So, my first effort would be to try restore the Library from TM to the correctly formatted drive:
http://support.apple.com/kb/HT4927?viewlocale=en_US&locale=en_US
will help with that.
If that doesn't work or is not possible, your next effort is to try rebuild the Library to the correctly formatted drive:
Download iPhoto Library Manager and use its rebuild function. (In early versions of Library Manager it's the File -> Rebuild command. In later versions it's under the Library menu.)
This will create an entirely new library. It will then copy (or try to) your photos and all the associated metadata and versions to this new Library, and arrange it as close as it can to what you had in the damaged Library. It does this based on information it finds in the iPhoto sharing mechanism - but that means that things not shared won't be there, so no slideshows, books or calendars, for instance - but it should get all your events, albums and keywords, faces and places back.
Because this process creates an entirely new library and leaves your old one untouched, it is non-destructive, and if you're not happy with the results you can simply return to your old one.
If that doesn't work, then you're recovering the masters from the Library and starting over from scratch.

I try to upgrade to mountain lion from app store , but it tells me you need 2 gig memory !! what do i do ?

I try to upgrade my iMac's desktop operating system to mountain lion by app store , but it tells me : you require 2 gig of memory ? !! what do i do please ?

For quality Memory and upgrade videos, visit OWC or Crucial

CIsco ISE 1.2 to 1.3 upgrade

I am planning for an ISE upgrade from version 1.2 to 1.3. I have two nodes (primary admin, secondary monitoring (ISE 3355) in one box and secondary admin, primary monitoring in the other (3315).) and 8 PSNs (all 3315).
My question is after upgrading when we are testing for failover of the HA pairs in both the nodes…are we going to face any technical complications because of the different model numbers. All nodes (2 +8= 10) are in different locations.

You must first upgrade the secondary Administration node to Release 1.3. For example, if you have a deployment set up as shown in the following figure, with one primary Administration node (node A), one secondary Administration node (node B), one Inline Posture node (IPN) (node C), and four Policy Service nodes (PSNs) (node D, node E, node F, and node G), one primary Monitoring node ( node H), and one secondary Monitoring node (node I), you can proceed with the following upgrade procedure.
http://www.cisco.com/c/en/us/td/docs/security/ise/1-3/upgrade_guide/b_ise_upgrade_guide_13/b_ise_upgrade_guide_chapter_01.html#ID20
Before You Begin : http://www.cisco.com/c/en/us/td/docs/security/ise/1-3/upgrade_guide/b_ise_upgrade_guide_13/b_ise_upgrade_guide_13_chapter_011.html

Aperture has upgraded to 3.5 in App Store -but shows as 3.4.5 in Finder

When I try to launch Aperture, I get the following message:
"The library in “/Volumes/iTunes/Pictures/Aperture Trial Library.aplibrary” cannot be loaded because it is from a newer version of Aperture."
The library was upgraded when another user was using the same library in iPhoto. This error would make sense to me if Aperture had not been updated. I've followed the updates and applied them as they were available. After investigating this further with the error message, the information in the finder shows my current Aperture version as 3.4.5. However, in the app store, under the same App Store ID, I have Aperture 3.5 showing under purchases and marked as installed.
I've attempted several suggestions on different threads with similar themes, to no avail. This included; changing the system language; attempting to re-install Aperture (which won't work because the App Store believes I'm running a current version); using time machine to go back to an older version of Aperture hoping this would trigger an update; Removing Aperture from the applications folder again hoping the App Store would identify a need for another download or update; and I've enabled "Debugging" through terminal in the App Store and reset the application.
Any other thoughts on a cause or solution would be appreciated.
Thanks,
Matt.

Matt,
what is your current MacOS X version? Your profile signature is showing "Aperture 3, iOS 7.0.4"; if you want to upgrade to Aperture 3.5.1 you need to be running Mavericks, 10.9.1.
However, in the app store, under the same App Store ID, I have Aperture 3.5 showing under purchases and marked as installed.
Have you searched your mac, if there is another Aperture installation? Maybe on a connected drive, or visible on the network? Search with Spotlight or "Find Any File" http://apps.tempel.org/FindAnyFile/index.php
Regards
Léonie

2 iphones upgraded to io6 now recieving the same messages on both phones, also. cant get on safari, itunes store but can get on face book and poker.

I have 2 iphones using th same itunes account(worked for a years so dont see why I should change this ) now both uprgraded to io 6 one is 4s, the other 4. Since upgraade, If I send a message to hubby on the 4 phone it bounces back to me and says it from my number, if 3 of our kids, who are not on Our itunes account and dont live here send a message it comes to both of us, If I send message they confused as to who it came from. Yesterday message from a stranger asking about something we selling, his messages were meant for 4 phone and came to my 4s as well, if hubby take a photo and send to some one I get it as well. Itunes not working at all, safari, not working , face book and zynga do work how ever. How can I fix this. Telstra said it itunes problem which I agree, Problem was not there before io6 up grade. but messages from hubby mates dont come to my phone, is it only strangers whose number we dont have and the numbers that we both have which would be our kids. If I send message to hubby it bounces back to me as well as he gets it. HELP Jenny

This is what happens when using the same Apple ID on multiple devices for iMessage.
Options are:
Use different Apple ID's for iMessage, can still use the same Apple ID for purchases.
Turn off iMessage.

Mms not working since upgrading to ISO5.0 on iphone 4 but can send to iphone to iphone .

my mms is not working to send to other phones.i can send to iphone4 to iphone4 but when i try send to other phones i cant.it did it fine on 4.35 then i updated to iso5 and now i cant .ive got iso5.1 now and still cant

Hey KewlDallas,
You may have a corrupt Sounds/Profiles database. Follow this article to clear the database: http://bbry.lv/buj0rQ then set your profiles and test again to see if you have the same issue.
-SR
Come follow your BlackBerry Technical Team on twitter! @BlackBerryHelp
Be sure to click Kudos! for those who have helped you.Click Solution? for posts that have solved your issue(s)!

Upgraded to Yosemite tried to update iPhoto but can't

This is the error it get from app store when i click to update iPhoto. "This update is not available for this Apple ID either because it was bought by a different user or the item was refunded or cancelled."

Perform the following, stopping with the first one which works:
1. Open the Mac App Store's Purchases tab. If you're prompted to accept it into your Apple ID, do so.
2. Move it out of the Applications folder(it may need to be put into the Trash temporarily), and then see if you can download it for free from its individual product page.
3. Click here and contact Apple.
(116126)

Cisco ISE AD (Windows Server 2013) Authentication Problem

Background:
Deployed two Cisco ISE 1.1.3. ISE will be used to authenticate wireless users, admin access to WLC and switches. Backend database is Microsoft AD running on Windows Server 2012. Existing Cisco ACS 4.2 still running and authenticating users. There are two Cisco WLCs version 7.2.111.3.
Wireless users authenticates to AD through ACS 4.2 works. Admin access to WLC and switches to AD through ISE works. Wireless authentication using PEAP-MSCHAPv2 and admin access wtih PAP/ASCII.
Problem:
Wireless users cannot authenticate to AD through ISE. The below is the error message "11051 RADIUS packet contains invalid state attribute" & "24444 Active Directory operation has failed because of an unspecified error in the ISE".
Conducted a detailed test of AD from ISE. The test was successful and the output seems all right except for the below:
xxdc01.xx.com (10.21.3.1)
Pinged:0 Mins Ago
State:down
xxdc02.xx.com (10.21.3.2)
Pinged:0 Mins Ago
State:down
xxdc01.xx.com
Last Success:Thu Jan 1 10:00:00 1970
Last Failure:Mon Mar 11 11:18:04 2013
Successes:0
Failures:11006
xxdc02.xx.com
Last Success:Mon Mar 11 09:43:31 2013
Last Failure:Mon Mar 11 11:18:04 2013
Successes:25
Failures:11006
Domain Controller: xxdc02.xx.com:389
    Domain Controller Type: Unknown DC Functional Level: 5
    Domain Name:            xx.COM
    IsGlobalCatalogReady:   TRUE
    DomainFunctionality:           2 = (DS_BEHAVIOR_WIN2003)
    ForestFunctionality:           2 = (DS_BEHAVIOR_WIN2003)
Action Taken:
Log on to Cisco ISE and WLC using AD credentials. This rules out AD connection, clock and AAA shared secret as the problem.
2)     Tested wireless authentication using EAP-FAST but same problem occurs.
3)     Detailed error message shows the below. This rules out any authentication and authorization polices. Before even hitting the authentication policy, the AD lookup fails.
12304 Extracted EAP-Response containing PEAP challenge-response
11808 Extracted EAP-Response containing EAP-MSCHAP challenge-response for inner method and accepting EAP-MSCHAP as negotiated
Evaluating Identity Policy
15006 Matched Default Rule
15013 Selected Identity Store - AD1
24430 Authenticating user against Active Directory
24444 Active Directory operation has failed because of an unspecified error in the ISE
4)     Enabled AD debugging logging and had a look at the logging. Nothing significant and no clues to the problem.
5)     Tested wireless on different laptos and mobile phones with same error
6)     Delete and add again AAA Client/Devices on both Cisco ISE and WLC
7)     Restarted ISE services
8)     Rejoin domain on Cisco ISE
9)     Checked release notes of ISE 1.1.3 and WLC 7.2.111.3 for any open caveats. Nothing found related to this problem.
10)    There are two ISE and two WLC deployed. Tested different combination of ISE1 to WLC1, ISE1 to WLC2 etc. This rules out hardware issue of WLC.
Other possibilities/action:
1)     Test it out on a different WLC version. Will have to wait outage approval to upgrade WLC software.
2)     Incompatibility of Cisco ISE and AD running on Microsoft Windows Server 2012
Anyone out there experienced something similar of have any ideas on why this is happening?
Thanks.
Update:
1) Built another Cisco ISE 1.1.3 sever in another datacentre that uses the same domain but different domain controller. Thais domain controller is running Windows Server 2008. This works and authentication successful.
2) My colleague tested out in a lab environment of Cisco ISE 1.1.2 with Windows Server 2012. He got the same problem as described.
This leads me to think there is a compatibility issue of Cisco ISE with Windows Server 2012.

Does anyone know if ISE 1.1.3 p1 supports AD DCs running 2012, if not which patch is required ot version?
Worryingly when ISE joins a 2012 DC it states it's connected successfully, and if another 2003 DC is available in that datacentre it will perform the auths against that DC whilst actually advertising (Connections in the GUI) that it's connected to the 2012 DC. We ended up mapping 8 PSN IP’s to another datacentre which has one Win2003 servers whilst the old 2003 DC is being promoted back, the 8 ISE servers started working, even though they still advertised they were connected to the 2012 DCs in the original datacentre - I performed a leave and join on one PSN and only then did it advertise that the node was connected to a DC in a different datacentre

Cisco ISE: External RADIUS Server

Hi,
I would like to forward RADIUS from PSN to another PSN. I already defined "External RADIUS Servers".
So, how can I use this external RADIUS server to process my request ?
Looking at the user guide but didn't find any information about this setting (For rule based not simple rule)
If anyone use this, please suggest this to me.
Thanks,
Pongsatorn

Defining an External RADIUS Server
The Cisco Cisco ISE can function both as a RADIUS server and as a RADIUS proxy server. When it acts as a proxy server, the Cisco Cisco ISE receives authentication and accounting requests from the network access server (NAS) and forwards them to the external RADIUS server. The Cisco Cisco ISE accepts the results of the requests and returns them to the NAS. You must configure the external RADIUS servers in the Cisco Cisco ISE to enable it to forward requests to the external RADIUS servers. You can define the timeout period and the number of connection attempts.
The Cisco Cisco ISE can simultaneously act as a proxy server to multiple external RADIUS servers. You can use the external RADIUS servers that you configure here in RADIUS server sequences. This External RADIUS Server page lists all the external RADIUS servers that you have defined in Cisco Cisco ISE. You can use the filter option to search for specific RADIUS servers based on the name or description or both.
To create an external RADIUS server, complete the following steps:
Step 1 Choose Administration > Network Resources > External RADIUS Servers.
The RADIUS Servers page appears with a list of external RADIUS servers that are defined in Cisco ISE.
Step 2 Click Add to add an external RADIUS server.
Step 3 Enter the values as described:
•Name—(Required) Enter the name of the external RADIUS server.
•Description—Enter a description of the external RADIUS server.
•Host IP—(Required) Enter the IP address of the external RADIUS server.
•Shared Secret—(Required) Enter the shared secret between Cisco Cisco ISE and the external RADIUS server that is used for authenticating the external RADIUS server. A shared secret is an expected string of text that a user must provide to enable the network device to authenticate a username and password. The connection is rejected until the user supplies the shared secret. The shared secret can be up to 128 characters in length.
•Enable KeyWrap—This option increases RADIUS protocol security via an AES KeyWrap algorithm, to help enable FIPS 140-2 compliance in Cisco ISE.
•Key Encryption Key—This key is used for session encryption (secrecy).
•Message Authenticator Code Key—This key is used for keyed HMAC calculation over RADIUS messages.
•Key Input Format—Specify the format you want to use to enter the Cisco ISE FIPS encryption key, so that it matches the configuration that is available on the WLAN controller. (The value you specify must be the correct [full] length for the key as defined below—shorter values are not permitted.)
–ASCII—The Key Encryption Key must be 16 characters (bytes) long, and the Message Authenticator Code Key must be 20 characters (bytes) long.
–Hexadecimal—The Key Encryption Key must be 32 bytes long, and the Message Authenticator Code Key must be 40 bytes long.
•Authentication Port—(Required) Enter the RADIUS authentication port number. The valid range is from 1 to 65535. The default is 1812.
•Accounting Port—(Required) Enter the RADIUS accounting port number. The valid range is from 1 to 65535. The default is 1813.
•Server Timeout—(Required) Enter the number of seconds that the Cisco Cisco ISE waits for a response from the external RADIUS server. The default is 5 seconds. Valid values are from 5 to 120.
•Connection Attempts—(Required) Enter the number of times that the Cisco Cisco ISE attempts to connect to the external RADIUS server. The default is 3 attempts. Valid values are from 1 to 9.
Step 4 Click Submit to save the external RADIUS server configuration.

Can't remove 9.4.6 after upgrading to 11.0

Have Windows XP Home Edition SP3, 32 bit, 1GB RAM. Problem started when I couldn't print PDF's with Reader 9.4.6 (error message: "Pages not selected). So I increased RAM and downloaded & installed Reader 11.0, which works fine. Then went to "Add/Remove Programs", but can't remove/uninstall 9.4.6. Error message "Can not apply patch..." Any suggestions? Don't want to screw up the 11.0 upgrade, which is working fine.

You can try using this tool to first remove all traces of Reader from your computer:
http://labs.adobe.com/downloads/acrobatcleaner.html
Then, you can download the full offline Reader installer from
http://get.adobe.com/reader/enterprise/
After downloading, restart your computer and run the installer before doing anything else.

Cisco ISE 1.2 to 1.3 Upgrade Failed - Old Certificates in Cert Store, but can't remove

Similar Messages

Maybe you are looking for