"Certificate revoked" error when trying to login to SmartConsole. Cause: Corruption caused by unpredictable circumstances ?

[Moe_89]

A customer was unable to login to smartconsole with error "certificate revoked". Followed sk113744 which resolved the issue. But the given cause of the issue is "Corruption caused by unpredictable circumstances". What does that even mean ? Does anyone know the actual reason for this issue ?

[PhoneBoy]

Based on the steps in the SK it appears to be something related to the SIC certificate.

What causes the issue is not yet known, though the SK clearly contains the steps to workaround the issue.

[Moe_89]

Dameon Welch Abernathy‌ Thanks for the quick reply. Though the issue was resolved by following the workaround, customer wanted to know the RC so that they can avoid this issue in the future.

[PhoneBoy]

Totally understand.

Unfortunately, root cause is not yet known.

[Andres_Candia]

There was any RCA finally?

[G_W_Albrecht]

This reminds me of another issue - the famous IPS Database corruption ! This is usually caused by a IPS update gone wrong. And remember, there is corruption everywhere, from file systems to politicians .

[HS]

Hi, 

today I've got the same issue. I'm follow the sk113744 that points to sk20905.

I've checked  the SIC certificate is still valid, by the command  cpca_client lscert -stat Valid -kind SIC 

My output  shows a certificate for "CN=cp_mgmt...", so  according the SK I should be missing the certificate to go forward. 

Does anyone have the same situation ? Did you guys follow the SK20905. 

Thank you very much.

My output:

Subject = CN=cp_mgmt_manage-cp,O=manage-cp.xxx.xxx.9k9mew
Status = Valid Kind = SIC

[HS]

Hi,

we follow sk20905 and now we are able to login on mgmt.

Now we have managemnt on!

Thank you for your help!

[Robin_H]

We had a similar situation, the list showed not one but ten valid certificates for cp_mgmt.

Although not explicitly mentioned being a problem by sk113744, sk137332 lists "multiple certificates" as a possible cause for problems. (The more experienced admin might have identified this as an issue right away).

Following sk20905 solved the issue.