The test ScepClientCertificateRenewalTest.testClientCertificateRenewalOnRolloverCa sometimes fails because it's able to successfully get a second certificate for a user (in this case it should get a HTTP 400 "Bad Request" error).
It doesn't seem to happen in "test:runone", but it does happen in "test:run" on my machine and on some of the machines on Jenkins. One thing that they have in common is that UNID configured, but running the UNID tests before with test:runone doesn't trigger the test failure.
It happens on both JBoss 7.1.1 and EAP 6.4, though. It started happening suddenly on some of the Jenkins machines, not seemingly related to any code change.
My guess is that this is either 1) a timing issue somewhere or 2) some left over data from one of the other tests.