Cisco Cisco ASA 5525-X Adaptive Security Appliance - No Payload Encryption 문제 해결 가이드

Contents

Introduction

Problem

Syslogs and Debug Output

Solution

Verify

Related Information

Introduction

This document describes how to address a change that occurred on March 18, 2016 in which
webservers that host tools.cisco.com were migrated to a SHA-2 certificate. After that migration,
some ASAv devices fail to connect to the Smart Software Licensing Portal (which is hosted on
tools.cisco.com) when they register an ID token or while they attempt to renew existing
authorizations. This was determined to be a certificate-related issue. Specifically, the new
certificate that is presented to the ASAv is signed by a different Intermediate Certificate Authority
than the ASAv expects and has preloaded.

Problem

When an attempt is made to register an ASAv to the Smart Software Licensing Portal, the
registration fails with a connection or communication failure. The show license registration and
call-home test profile license commands show these outputs.

ASAv# show license registration

Registration Status: Retry In Progress.

Registration Start Time: Mar 22 13:25:46 2016 UTC

Registration Status: Retry In Progress.

Registration Start Time: Mar 22 13:25:46 2016 UTC

Last Retry Start Time: Mar 22 13:26:32 2016 UTC.

Next Scheduled Retry Time: Mar 22 13:45:31 2016 UTC.

Number of Retries: 1.

Last License Server response time: Mar 22 13:26:32 2016 UTC.

Last License Server response message: Communication message send response error

ASAv# call-home test profile License

INFO: Sending test message to