Cisco ISE - Issues after new CA Certificate Our Root CA Certificate expired recently, in advance we loaded the new one on our ISE servers however after the expiry we have had issues with Android devices and BYOD onboarding. Apple devices are working without issue and our 802.1x with workstations is also working without issues however Android devices are flagging the following error in the logs: **"EAP-TLS failed SSL/TLS handshake because the client rejected the ISE local-certificate"** We have tried removing the old certificate, restarted the PSN and ISE servers and forced a resync as well. Apple and Windows devices are showing the certificates are fine and NOT flagging the same error, they operate 100% of the time. Note: All ISE certificates come from our enterprise CA Has anyone encountered this issue before?

In case this helps someone else I can confirm the problem was ultimately resolved by forcing a manual Sync of the PSN, no other changes were required.