cannot connect to SmartCenter - GUI - cp_mgmt cert expired

[Jay_D]

Hi,

We can no longer connect to the SmartCenter.
We get the error that time might not be okay and that certificates are expired. Time settings are correct though.

I launched cpca_client set_mgmt_tool on -no_ssl and browsed to http://...:18265 and noticed that the firewall certificate and the firewall VPN certificate were renewed but the cp_mgmt certificate was "expired".

Why hasn't this been renewed? I had done a migration from R55 in february this year to R62. Now suddenly the R62 has this problem.

Anyone got info for this? How can I get the GUI back? We did not dare to reboot yet.

TIA

[motociclante]

Did you upgrade version every time or did you move from version/hardware to new version/hardware?

Did you keep the same smarcenter hostname?

It's an information that I'm try to understand for my self case. :D

[Jay_D]

yep, it was upgrade_export and import every time and new hardware

same names though.

After the reboot, services were still running but still same issue.
I solved this by having my GUI PC and firewall backdated. I then unchecked every IKE/VPN thingie and ran fwm sic_reset.
Then put the date correct and all okay again. SecureClient users have to do an update and then we are good again.

Don't know why this happened at 2 of our customers though.

A cpca revoke and recreate of the cp_mgmt had failed, in case you wonder if I tried that.