https://community.cisco.com/t5/network-security/asa-firepower-4100-asdm-issue/m-p/3782907#M1011291 <P>Hi,</P> <P>&nbsp;</P> <P>I have a Cisco ASA FPR 4110.</P> <P>&nbsp;</P> <P>I have gained https access to the management IP which was set up in the original set up. I then provisioned the logical device list with my second management IP address and upgraded the asa code on the box. I can access the management IP via SSH, but I should be able to ASDM and https to it and cannot.&nbsp;</P> <P>I receive the below error from IE: But on Chrome it just says it cannot be reached.&nbsp;</P> <P>Certificate error: Navigation blocked</P> <DIV id="Wrapper"> <DIV id="invalidcert"> <DIV class="msgBlock"> <DIV class="msgBody"> <TABLE> <TBODY> <TR> <TD> <DIV id="infoBlockID"> <P>Error Code: DLG_FLAGS_INVALID_CA<BR />DLG_FLAGS_SEC_CERT_CN_INVALID</P> </DIV> </TD> </TR> </TBODY> </TABLE> <P>&nbsp;</P> <P>On ASDM, it prompts me for a username and password... but from previously configuring a 4100 I press enter as it does not need credentials but still does not log me in. I have tried other usernames and passwords I have set up also, as well as debugging http from the asa and cannot see any errors. Any ideas?&nbsp;</P> <P>TIA for any help!</P> </DIV> </DIV> </DIV> </DIV> Tue, 12 Mar 2019 14:14:07 GMT amoth00011 2019-03-12T14:14:07Z https://community.cisco.com/t5/network-security/asa-firepower-4100-asdm-issue/m-p/3782907#M1011291 <P>Hi,</P> <P>&nbsp;</P> <P>I have a Cisco ASA FPR 4110.</P> <P>&nbsp;</P> <P>I have gained https access to the management IP which was set up in the original set up. I then provisioned the logical device list with my second management IP address and upgraded the asa code on the box. I can access the management IP via SSH, but I should be able to ASDM and https to it and cannot.&nbsp;</P> <P>I receive the below error from IE: But on Chrome it just says it cannot be reached.&nbsp;</P> <P>Certificate error: Navigation blocked</P> <DIV id="Wrapper"> <DIV id="invalidcert"> <DIV class="msgBlock"> <DIV class="msgBody"> <TABLE> <TBODY> <TR> <TD> <DIV id="infoBlockID"> <P>Error Code: DLG_FLAGS_INVALID_CA<BR />DLG_FLAGS_SEC_CERT_CN_INVALID</P> </DIV> </TD> </TR> </TBODY> </TABLE> <P>&nbsp;</P> <P>On ASDM, it prompts me for a username and password... but from previously configuring a 4100 I press enter as it does not need credentials but still does not log me in. I have tried other usernames and passwords I have set up also, as well as debugging http from the asa and cannot see any errors. Any ideas?&nbsp;</P> <P>TIA for any help!</P> </DIV> </DIV> </DIV> </DIV> Tue, 12 Mar 2019 14:14:07 GMT https://community.cisco.com/t5/network-security/asa-firepower-4100-asdm-issue/m-p/3782907#M1011291 amoth00011 2019-03-12T14:14:07Z https://community.cisco.com/t5/network-security/asa-firepower-4100-asdm-issue/m-p/3783331#M1011292 <P>Have you allocated a separate unique and dedicated management interface for your ASA logical device?</P> Sat, 19 Jan 2019 02:48:50 GMT https://community.cisco.com/t5/network-security/asa-firepower-4100-asdm-issue/m-p/3783331#M1011292 Marvin Rhoads 2019-01-19T02:48:50Z https://community.cisco.com/t5/network-security/asa-firepower-4100-asdm-issue/m-p/3784099#M1011293 <P>Hi Marvin,</P> <P>&nbsp;</P> <P>Yes I have done this.</P> Mon, 21 Jan 2019 09:50:53 GMT https://community.cisco.com/t5/network-security/asa-firepower-4100-asdm-issue/m-p/3784099#M1011293 amoth00011 2019-01-21T09:50:53Z https://community.cisco.com/t5/network-security/asa-firepower-4100-asdm-issue/m-p/3784229#M1011294 <P>Have you assigned a free 3DES-AES license on the ASA logical device?</P> <P>Have you created an RSA private key ("crypto key generate ...")?</P> <P>&nbsp;</P> <P>&nbsp;</P> <P>If the above are yes, try opening the Java console while launching ASDM. Watch the output of it for errors.</P> <P>&nbsp;</P> <P>You could also do a packet capture and look for things like SSL/TLS failing to negotiate a common cipher or more details on the certificate failure.</P> Mon, 21 Jan 2019 12:51:17 GMT https://community.cisco.com/t5/network-security/asa-firepower-4100-asdm-issue/m-p/3784229#M1011294 Marvin Rhoads 2019-01-21T12:51:17Z https://community.cisco.com/t5/network-security/asa-firepower-4100-asdm-issue/m-p/3784331#M1011295 <P>Thanks!&nbsp;</P> <P>&nbsp;</P> <P>I will give this a go this week.</P> Mon, 21 Jan 2019 15:26:48 GMT https://community.cisco.com/t5/network-security/asa-firepower-4100-asdm-issue/m-p/3784331#M1011295 amoth00011 2019-01-21T15:26:48Z