Guest

Preview Tool

Cisco Bug: CSCuq33617 - IOS RA Serever crashes in NDES and SUbCA setup

Last Modified

Mar 13, 2018

Products (9)

  • Cisco IOS
  • Cisco 7301 Router
  • Cisco 7206 Router
  • Cisco 7206VXR Router
  • Cisco 7204 Router
  • Cisco 7202 Router
  • Cisco 7200 Series NPE-G2 Network Processing Engine
  • Cisco 7204VXR Router
  • Cisco 7201 Router

Known Affected Releases

15.0(1.0.4) 15.2(4)M

Description (partial)

Symptom:
IOS CA in RA mode randomly crashes during normal operation when NDES server cannot communicate with with SubCA  due to any problem with the communication link.

When this happens, RA fail to grant enrollment requests. Enrollment request database on RA shows that request as pending.  Trying to grant the request manually fail as well with the following error


VPNSDPMSPJP01#grant 48

% The Certificate Server is busy processing an enrollment request. Please try again.

Conditions:
- IOS RA and Microsoft NDES/SubCA 
- NDES server and SubCA resides o different MS boxes
- Communication failure between NDES and SubCA
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.