Guest

Preview Tool

Cisco Bug: CSCvt29546 - License is getting unregistered after restoring backup on same box

Last Modified

May 18, 2020

Products (1)

  • Cisco Firepower Management Center

Known Affected Releases

6.6.0

Description (partial)

Symptom:
Smart License becomes unregistered in a case when it should be actually registered.

In the logs (/var/log/cisco/smart_agent.log) you can see the following messages:
ERROR Utility:227 - unable to open/create file: /ngfw/etc/sf//state.yml.tmp

INFO  DefaultSmartAgentManager:178 - Received notification from Nesla: 'NotifyIdCertRenewFail'.
INFO  DefaultSmartAgentManager:179 - Notification details: GlobalNotification [failReasonCode=ErrorCommResponse, failMessage={"product_instance_identifier":["ProductInstance 'some-pid-here' is not valid"]}, enforceMode=NotApplicable, allowRestricted=false, notificationType=NotifyIdCertRenewFail, agentID=null, tenantContextId=null]
INFO  DefaultSmartAgentManager:223 - Device was de-registered from CSSM side.

Conditions:
It occurs when you have an HA pair, devices are registered in Smart License. The issue is seen if a device is registered in Smart License, de-registered and registered again and then you do backup/restore (or just restart Tomcat, e.g. calling "pmtool restartbyid tomcat" command).
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.