Certificate Revoked error on smartconsole

[mohammede]

Hi Community,

We have two servers to log into the smartconsole, one of the servers I can no longer log into the smart console, we reboot the server and problem still,  knowing that I can access from the second server,

Also note that the SIC certificat is still valid,

can please advise about this matter

[the_rock]

Can you please attach the screenshot of the error you see?

Andy

[mohammede]

find attached the error 

[_Val_]

This does not make much sense. Any screenshots & details?

[mohammede]

from the server 1 i Get the message below, What baffles me is that I can log in from another server

[Blason_R · Accepted solution]

Below command should help. run those from expert prompt and ensure you have full backup taken before performing this activity

cpca_client lscert -stat Valid
cpca_client lscert -stat Valid -kind SIC
cd $CPDIR/conf
ls -lh | grep sic
cp $CPDIR/conf/sic_cert.p12{,_BACKUP}
cpca_client revoke_cert -n "CN=cp_mgmt"
cpca_client create_cert -n "CN=cp_mgmt" -f $CPDIR/conf/sic_cert.p12

[mohammede]

thanks blason i will proceed to create a new certificate

[ilirz]

Hi Blason 

I have the same problem with smart console,

if i create new certificate to the management according to your suggestion does it affect the SIC communication with branch gateway . 

I have management R 80.20 version  and yesterday i logged in to the management and get alarm "connection can not be initiated" and all gateway sic not connection is down. Today after reboot the management I see error Certificate Revoked and can't loggin to the smart console

[the_rock]

It would affect the SIC, as you issue brand new cert.

[Blason_R]

You mean following my commands? Nope it wont affect SIC for sure since I have done this multiple times.

[the_rock]

Sorry, my bad, I responded here, but meant to on something else related to fwm_sic reset command. @ilirz , Blason is right, those commands wont affect SIC.

[ilirz]

thank you,ok I will follow Blason suggestion

[the_rock]

Great, keep us posted if it works.

Andy

[ilirz]

I tried on management r 80.20 take 220 and worked. Thank you to all!

[the_rock]

Great job, have a nice weekend!

 

[ilirz]

Thanks Blason

[Blason_R]

Follow sk20905 and it should resolve your issue

[_Val_]

Still unclear. Are you using a certificate to login to SmartConsole?

Also, R80.20 is out of support for a while, I hope you know that.

[mohammede]

Thanks for replay,

yes we use certificate to login to SC , i checked before and is still valid 

thanks for the note 

[_Val_]

Issue a new certificate to that client and try again.

[the_rock]

Just do what Val said, issue new cert.