I have successfully installed a 3rd party cert from GlobalSign on the 5760 for webauth with an open SSID. It works for about a week or two, then for some reason the 5760 stops using the GlobalSign cert and starts giving clients the IOS-self-signed cert when they try to authenticate.
a "show crypto pki trustpoints" shows the certs GlobalSign certs are still there. The time is correct on the controller and the certs are valid. If I remove the trustpoints (certs) "no crypto pki trustpoint <name>" and paste the certs back in things work again (for a few days). I have two 5760s. The issue is happening on both.
The code version is 03.03.01SE which seems to be very buggy. I have my own bug ID for a different problem and have 3 other tac cases open on this thing. TAC doesn't seem overly knowledgeable when it comes to the 5760, or at least isn't as responsive with a correct answer in a timely fashion.
Converged access is still pretty new. I'm not surprised that TAC might not have all the answers but eventually when more and more customers start rolling this out even is on the forums can provide more input. I only have few customers who have gone this route and my home lab with the 5760 doesn't do justice:). Good to know that you seem to see that there are issues as I don't have much feed back from my customers. Hopefully TAC can help you with the issues your having.
I think we have a similar issue. However it only affects few clients so far, but I cannot say for certain as the average user tends to ignore the certificate warning, continues on and does not open a ticket. As such the actual number could be higher.
When I tried to reproduce the problem I always got the valid certificate shown.
Transferring Crash file from standby: Login to the Active WLC in HA.
From CLI: (Cisco Controller) >transfer upload datatype crash (Cisco
Controller) >transfer upload filename (Cisco
Controller) >transfer upload mode tftp (Cisco Controller) >transfer
This is the start of a display filter cross reference between Wireshark
and OmniPeek. The 1st installment is a table of advanced filters. More
filters will be added as time allows. It is a living doc, so check back
for changes every so often Please feel f...