topic Re: "Certificate revoked" error when trying to login to SmartConsole. Cause: Corruption caused by unpredictable circumstances ? in Firewall and Security Management

"Certificate revoked" error when trying to login to SmartConsole. Cause: Corruption caused by unpredictable circumstances ?

Moe_89 — Sun, 11 Mar 2018 06:17:06 GMT

A customer was unable to login to smartconsole with error "certificate revoked". Followed sk113744 which resolved the issue. But the given cause of the issue is "Corruption caused by unpredictable circumstances". What does that even mean ? Does anyone know the actual reason for this issue ?

Re: "Certificate revoked" error when trying to login to SmartConsole. Cause: Corruption caused by unpredictable circumstances ?

PhoneBoy — Sun, 11 Mar 2018 08:58:15 GMT

Based on the steps in the SK it appears to be something related to the SIC certificate.

What causes the issue is not yet known, though the SK clearly contains the steps to workaround the issue.

Re: "Certificate revoked" error when trying to login to SmartConsole. Cause: Corruption caused by unpredictable circumstances ?

Moe_89 — Sun, 11 Mar 2018 09:28:12 GMT

Dameon Welch Abernathy‌ Thanks for the quick reply. Though the issue was resolved by following the workaround, customer wanted to know the RC so that they can avoid this issue in the future.

Re: "Certificate revoked" error when trying to login to SmartConsole. Cause: Corruption caused by unpredictable circumstances ?

PhoneBoy — Sun, 11 Mar 2018 18:15:29 GMT

Totally understand.

Unfortunately, root cause is not yet known.

Re: "Certificate revoked" error when trying to login to SmartConsole. Cause: Corruption caused by unpredictable circumstances ?

G_W_Albrecht — Tue, 13 Mar 2018 14:38:52 GMT

This reminds me of another issue - the famous IPS Database corruption ! This is usually caused by a IPS update gone wrong. And remember, there is corruption everywhere, from file systems to politicians .

Re: "Certificate revoked" error when trying to login to SmartConsole. Cause: Corruption ca

HS — Mon, 05 Aug 2019 07:42:58 GMT

Hi,

today I've got the same issue. I'm follow the sk113744 that points to sk20905.

I've checked the SIC certificate is still valid, by the command cpca_client lscert -stat Valid -kind SIC

My output shows a certificate for "CN=cp_mgmt...", so according the SK I should be missing the certificate to go forward.

Does anyone have the same situation ? Did you guys follow the SK20905.

Thank you very much.

My output:

Subject = CN=cp_mgmt_manage-cp,O=manage-cp.xxx.xxx.9k9mew
Status = Valid Kind = SIC

Re: "Certificate revoked" error when trying to login to SmartConsole. Cause: Corruption ca

HS — Mon, 05 Aug 2019 09:54:24 GMT

Hi,

we follow sk20905 and now we are able to login on mgmt.

Now we have managemnt on!

Thank you for your help!

Re: "Certificate revoked" error when trying to login to SmartConsole. Cause: Corruption ca

Robin_H — Wed, 04 Dec 2019 09:48:19 GMT

We had a similar situation, the list showed not one but ten valid certificates for cp_mgmt.

Although not explicitly mentioned being a problem by sk113744, sk137332 lists "multiple certificates" as a possible cause for problems. (The more experienced admin might have identified this as an issue right away).

Following sk20905 solved the issue.

Re: "Certificate revoked" error when trying to login to SmartConsole. Cause: Corruption ca

Andres_Candia — Fri, 17 Apr 2020 23:48:55 GMT

There was any RCA finally?