As explained in Known issues in Certificate Manager for Cryptographic Security Platform 1.2.0, after installing PKI Hub 1.2.0, you must manually upgrade Certificate Manager and CA Gateway if you want Certificate Manager to support a Sectigo CA.

Session expiration does not redirect to the login page (ATEAM-17362)

When a user session expires, the Management Console does not automatically redirect to the login page.

Installations with Certificate Enrollment Gateway cannot be restored (CSF-704 & EDM-18536)

PKI Hub installations with a deployed Certificate Enrollment Gateway do not support Restoring PKI Hub.

Workaround:

  1. Contact Entrust support for a new version of the csf-backup-restore.sh script
  2. Open a user session in any of the PKI Hub installation nodes.
  3. Run the following commands to install the script. 
    sudo cp --force csf-backup-restore.sh /opt/entrust/scripts/rhel/
    sudo chmod 550 /opt/entrust/scripts/rhel/csf-backup-restore.sh
    sudo chown sysadmin:edm /opt/entrust/scripts/rhel/csf-backup-restore.sh
  4. Follow the steps described in Restoring PKI Hub to restore the state.

Occasional restore failures of single-node installations (EDM-16171)

The process described in Restoring PKI Hub fails 75% of the time on single-node installations.

Workaround: Run the clusterctl uninstall command to uninstall the cluster, and re-try Restoring PKI Hub.

Installations with Certificate Authority do not support upgrading (EDM-19202)

PKI Hub 1.2.0 installations with the Certificate Authority deployed solution do not support upgrading to PKI Hub 1.3.0.

Workaround: Skip the 1.2.0 release and upgrade PKI Hub 1.2.0 to 1.2.1.