As explained in Certificate Manager for 1.2 known issues, after installing PKI Hub 1.2.0, you must manually upgrade Certificate Manager and CA Gateway if you want Certificate Manager to support a Sectigo CA.

Session expiration does not redirect to the login page (ATEAM-17362)

When a user session expires, the Management Console does not automatically redirect to the login page.

Installations with Certificate Enrollment Gateway cannot be restored (CSF-704 & EDM-18536)

PKI Hub installations with a deployed Certificate Enrollment Gateway do not support Restoring.

Workaround:

  1. Contact Entrust support for a new version of the csf-backup-restore.sh script
  2. Open a user session in any of the PKI Hub installation nodes.
  3. Run the following commands to install the script. 
    sudo cp --force csf-backup-restore.sh /opt/entrust/scripts/rhel/
    sudo chmod 550 /opt/entrust/scripts/rhel/csf-backup-restore.sh
    sudo chown sysadmin:edm /opt/entrust/scripts/rhel/csf-backup-restore.sh
  4. Follow the steps described in Restoring to restore the state.

Occasional restore failures of single-node installations (EDM-16171)

The process described in Restoring fails 75% of the time on single-node installations.

Workaround: Run the clusterctl uninstall command to uninstall the cluster, and re-try Restoring.

Installations with Certificate Authority do not support upgrading (EDM-19202)

PKI Hub 1.2.0 installations with the Certificate Authority deployed solution do not support upgrading to PKI Hub 1.3.0.

Workaround: Skip the 1.2.0 release and upgrade  PKI Hub 1.2.0 to 1.2.1