Guest

Preview Tool

Cisco Bug: CSCvu95303 - Smart license registration License certificate validation failed (LcsClient) error

Last Modified

Oct 07, 2020

Products (1)

  • Cisco Firepower NGFW

Known Affected Releases

6.5.0 6.6.0 6.7.0

Description (partial)

User reverts an old backup of the device running 6.2.3 and upgrades to any of the releases (630/640/650) and then to 660/661/670, sometimes it leads to identity change on the device.

Symptom:
- On 6.6.* releases Smart License registration fails due to "Error executing LcsClient#identityCert(Map)" error
- On 6.7.0 Smart License registration fails due to "License certificate validation failed. The Smart License servers might not have been available. Please try again." error

Conditions:
In case if issue happens on 6.6.* releases:
1. Create 6.2.3 release vFTD
2. Register the Smart License
2. Create a backup 
3. Unregister the SL 
4. Restore the backup. 
5. Upgrade to 6.6.0 release
6. Device gets unregistered automatically 
7. Register the device
Expected: Registration successful
Actual: Registration failed due to `Error executing LcsClient#identityCert(Map)` error


In case if issue happens on 6.7.0 release:
1. Create 6.2.3 release vFTD
2. Register the Smart License
2. Create a backup 
3. Unregister the SL 
4. Restore the backup. 
5. Upgrade to some release below 6.6.0
6. Upgrade to 6.7.0 release
7. Device gets unregistered automatically
8. Register the device
Expected: Registration successful
Actual: Registration failed due to `License certificate validation failed.` error
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.