By Cisco Duo
Publication Date: 2026-04-09 12:52:00
Action Required: April 15, 2026 Duo CA Bundle Expiration
Duo products that use certificate pinning, such as the Duo Authentication Proxy, require a software update for uninterrupted use. Legacy clients could stop working at any time after April 15, 2026.
Check your Duo Authentication Proxy installations used for Cisco ISE RADIUS authentication and upgrade them if they are not running version 6.5.1 or later.
Please visit Duo Knowledge Base article 9451 for more information and guidance.
Overview
The Cisco ISE instructions support push, phone call, or passcode authentication. This configuration does not feature the interactive Duo Prompt for web-based logins, but does capture client IP information for use with Duo policies, such…