Guest

Preview Tool

Cisco Bug: CSCvu49664 - Smart Licensing Satellite (OnPrem) Returning Expired ID Cert

Last Modified

Oct 09, 2020

Products (1)

  • Cisco Smart Software Manager

Known Affected Releases

NA

Description (partial)

Symptom:
Devices registered to smart satellite server (OnPrem) may go into an unlicensed state requiring manual intervention to restore.

In the OnPrem System Log search for ‘retry_interval’ to see if it is set to ‘-1’ as that is an indication that the expiry_date (unix time in microseconds) is less than the start_date.

Conditions:
Issue is observed during automatic authorization renewal when the id cert expiry date is reported as before the start date. This results in a retry interval of -1: This issue shows up 90 days after the product was registered/renewal or 90 days after issuing 'license smart renew id' command or equivalent for the product

smartlicense/smartlic 0/RSP0/CPU0 t8711 [7285] SMART DEBUG - NKM4\\\"},\\\"start_date\\\":1586505853005,\\\"expiry_date\\\":1586383572483,\\\"retry_interval\\\":-1,\\\"messages\\\":[{\\\"na

For the ASA product line this can have the additional symptom of the device rebooting daily

From the SSM On-Prem in the Admin Portal->Support Center, select the system log and search for 'retry_interval' to see if you have "retry_interval\\\":-1, 
Aug 10 14:56:53 ha-10 eeb65377badb: <Envelope xmlns="http://schemas.xmlsoap.org/soap/envelope/"><Body><response encodingStyle=""><![CDATA[{"signature":{"type":"SHA256","value":"A4vEVIZHJ4pa/VBYfQFQHWLoioGpvDf4opgwKBNO57CqoA3BNUq6UGAydVzXMcKK\nHlHBjTm+4+VI4pL6HdJo/v/X76B/hwDegQuSiE2DVTrYdnhJ44eU60lsRD2R/GCZ\nhk53bKi4TAzYMHZb/CeJbPkfdkHpFy16L9KxsProTffUfNiGiF1vfLi1k3Un1LQw\nBlj8CA/IkQm4Epn075p5lxT1K23hqU/1FmOh1yLSLafWh8g/ZUb8MSQ4YVCsEg+F\n3DrEHPEjXhngymIw551rFS7W7/xhfybEKsyn1WQU1UtaK9mCOQQHlRJLsiiyerkA\nqQs82+cYuAFPo6hIZCZI8w=="},"response":"{\"header\":{\"request_type\":\"ENTITLEMENT\",\"sudi\":{\"udi_pid\":\"CSR1000V\",\"udi_serial_number\":\"937L5BMWB42\"},\"version\":\"1.3\",\"locale\":\"en_US.UTF-8\",\"signing_cert_serial_number\":\"2201376\",\"id_cert_serial_number\":\"91183\",\"product_instance_identifier\":\"eb122be6-cd7d-4a17-a9fe-25cfa0f73cf5\",\"connect_info\":{\"name\":\"C_agent\",\"version\":\"4.6.7_rel/98\",\"production\":true,\"capabilities\":[\"DLC\",\"AppHA\",\"MULTITIER\",\"EXPORT_2\"]}},\"status_code\":\"OK\",\"status_message\":\"OK\",\"response_data\":\"{\\\"compliance_status\\\":\\\"OOC\\\",\\\"product_instance_identifier\\\":\\\"eb122be6-cd7d-4a17-a9fe-25cfa0f73cf5\\\",\\\"nonce\\\":\\\"16357734694375346399\\\",\\\"sudi\\\":{\\\"udi_pid\\\":\\\"CSR1000V\\\",\\\"udi_serial_number\\\":\\\"937L5BMWB42\\\"},\\\"start_date\\\":1597071233323,\\\"expiry_date\\\":1590407663870,\\\"retry_interval\\\":-1,\\\"messages\\\":[{\\\"name\\\":\\\"regid.2014-05.com.cisco.ax_100M,1.0_2fff5ed6-e23c-455d-ade3-83ba3c8ed890\\\",\\\"version\\\":\\\"1.0\\\",\\\"vendor_string\\\":\\\"2fff5ed6-e23c-455d-ade3-83ba3c8ed890\\\",\\\"compliance_status\\\":\\\"OOC\\\",\\\"display_name\\\":\\\"CSR 1KV AX 100M\\\",\\\"description\\\":\\\"CSR 1KV AX 100M\\\",\\\"info_message\\\":\\\"\\\",\\\"subscription\\\":null}],\\\"pool_name\\\":\\\"Default\\\",\\\"hostname\\\":\\\"CSR23\\\",\\\"ip_address\\\":null,\\\"validation_context\\\":null,\\\"errors\\\":{}}\"}"}]]></response><result>succeeded</result></Body></Envelope>
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.