Security

Today we have migrated the clearpass from 6.10.8 to 6.11.7 and for a dot 1x service we are getting the error " 

Make sure you have all of the certificates loaded, enabled, and set to the proper usage. 

Yea I would say the same. as chuclher, since a restore doesn't install the certificates. Unknown_CA usually means that the certifiacte Clearpass is presenting isn't the one that the client trusts.

Yeah. It's in upgrade/migration instructions that you need to export certs before reimaging the machine and import certs back when completed.

It would be much less hassle if backup could do it or if we have an option in Cert management to export/import our custom certs in bulk.

For one or two certs it really doesn't matter, but still you can easily miss it when you are looking into trusted cert database.

Best, Gorazd