topic Re: Alarms: Smart Licensing Id Certificate Renewal Failure in Network Access Control

Alarms: Smart Licensing Id Certificate Renewal Failure

sinady — Thu, 24 Jun 2021 07:24:17 GMT

Hi team,

I'm facing issue with alarm "Smart Licensing Id Certificate Renewal Failure"

it alert everyday. but when i click on details to see the licensing method and Cisco Smart Licensing is currently in use.

Description

Registration renewal for Smart Licensing with Cisco Smart Software Manager failed.

Suggested Actions

Refer to the ISE License Administration page to manually Renew Registration for Smart Licensing. Contact your Cisco partner if the issue persists.

Note: currently i using ISE 2.7 patch 3. I tired to manually by using the Refresh button as instruction from Cisco, but it issue still persists.

Really appreciated if anyone could help and advise on this.

Re: Alarms: Smart Licensing Id Certificate Renewal Failure

daroth855 — Thu, 24 Jun 2021 06:47:57 GMT

Hi. It seems like the same issue to me. Could any body face the same issue?

Re: Alarms: Smart Licensing Id Certificate Renewal Failure

Marcelo Morais — Thu, 24 Jun 2021 14:54:01 GMT

Hi @daroth855 ,

please take a look at the same post at: Smart Licensing Authorization Renew Failure.

Hope this helps !!!

Re: Alarms: Smart Licensing Id Certificate Renewal Failure

jvujcich — Sun, 11 Jun 2023 22:05:02 GMT

I'm running ISE 3.1 p5

Niether the "Renew Registration" nor the "refresh" options worked for me.

Instead, I had to create a new token (in our Smart Software Licensing portal) and paste this into the ISE Licensing page:

On the ISE PAN, Navigate to Administration > System > Licensing. Expand the Registration Details option, paste the new token from above. Hit the "Update" button and wait a moment.

No service outage was required to do this.

Re: Alarms: Smart Licensing Id Certificate Renewal Failure

HOLGER HAHN — Tue, 22 Aug 2023 15:42:55 GMT

I'm running ISE 3.2 p2 and SSM-on-Prem 8-202304 for licensing.

The update option with a new token doesn't work for me.
Registration is fine but not authorization.
The used licenses are still in compliance state "Evaluation"

I've opened a TAC case and wait for their findings.

Re: Alarms: Smart Licensing Id Certificate Renewal Failure

stubush — Wed, 27 Sep 2023 08:50:37 GMT

Did you get a solution from TAC regarding this? I'm facing exactly the same symptoms as you, our registration is fine but authorization isn't, and licensing is showing as Evaluation. Tried the re-registration option, and tried a new token from our SSM-on-prem but neither made a difference

Running ISE 3.1 p7 and SSM-on-Prem 8-202304

Re: Alarms: Smart Licensing Id Certificate Renewal Failure

HOLGER HAHN — Wed, 27 Sep 2023 09:18:47 GMT

The case is still open.
Cisco assumed wrong data in DB and deleted something. But after reboot the application stuck in restart.
Either the database was corrupted by the deletions or it was already corrupt before.
In any case, we had to make the Secondary Node to Primary Node and then rebuild the broken node.
Since I had vacation after that, we haven't done anything further yet.
Furthermore we have a new problem because I always get queue link error messages...

Re: Alarms: Smart Licensing Id Certificate Renewal Failure

stubush — Wed, 27 Sep 2023 09:28:08 GMT

What a pain!

I too have a TAC case open, so will see what they come back with. Will postt here if we manage to get a solution with them

Re: Alarms: Smart Licensing Id Certificate Renewal Failure

Matthias — Wed, 08 Nov 2023 16:05:10 GMT

Same issue here 3.2 Patch 3.

Any news from the other open cases here ?

Re: Alarms: Smart Licensing Id Certificate Renewal Failure

HOLGER HAHN — Thu, 09 Nov 2023 07:17:11 GMT

The problem has now been solved for me.
The TAC Engineer removed some things from the database and then it worked.
For all those who also have the problem and open a case, you can refer to mine: 696002598
The engineer was Dmitry Demin.

Re: Alarms: Smart Licensing Id Certificate Renewal Failure

jsteffensen — Thu, 18 Jan 2024 14:56:59 GMT

Running ISE 3.1 we were able to solve it:
- we deregistered ise from licenseserver
- reloaded the admin node
- and then registered again.

That resolved it (deregister and register with an reboot in between)

Re: Alarms: Smart Licensing Id Certificate Renewal Failure

maik.ryssel — Fri, 24 Jan 2025 10:06:43 GMT

Does this procedure break Tacacs/Radis authentication on the PSNs during the reboot until you re-register the admin node?

Re: Alarms: Smart Licensing Id Certificate Renewal Failure

Marcelo Morais — Fri, 24 Jan 2025 13:58:33 GMT

Hi @maik.ryssel ,

when a PSN Node is rebooted, it takes a while for the Application Server to come up, during this time, the PSN Node is unable to receive Requests.

Use the following command to check the Application Server status:

ise/admin# show application status ise
 ISE PROCESS NAME    STATE     PROCESS ID 
 ----------------------------------------
 ...
 Application Server  running   32908 
 ...

Hope this helps !!!