The base installation of Cryptographic Security Platform 1.1.0 has the following known issues.
As explained in Certificate Manager known issues, after installing Cryptographic Security Platform 1.1.0, you must manually upgrade Certificate Manager and CA Gateway if you want Certificate Manager to support a Sectigo CA.
McAfee agent not supported (EDM-4074)
You cannot install McAfee agent on Cryptographic Security Platform 1.1.0 nodes.
Occasional restore failures of single-node installations (EDM-16171)
The process described in Restoring the state fails 75% of the time on single node installations.
Workaround: Run the clusterctl uninstall command to uninstall the cluster and re-try Restoring the state.
Installations with Certificate Enrollment Gateway cannot be restored (CSF-704 & EDM-18536)
Cryptographic Security Platform installations with a deployed Certificate Enrollment Gateway do not support Restoring the state.
Workaround:
- Contact Entrust support for a new version of the
csf-backup-restore.sh
script - Open a user session in any of the Cryptographic Security Platform installation nodes.
- Run the following commands to install the script.
sudo cp --force csf-backup-restore.sh /opt/entrust/scripts/rhel/
sudo chmod 550 /opt/entrust/scripts/rhel/csf-backup-restore.sh
sudo chown sysadmin:edm /opt/entrust/scripts/rhel/csf-backup-restore.sh
- Follow the steps described in Restoring the state to restore the state.