topic Cannot download updates: peer certificate cannot be authenticated in Network Security

Cannot download updates: peer certificate cannot be authenticated

Colin Higgins — Tue, 12 Mar 2019 14:06:29 GMT

I have a FMC 1500 that I am trying to update to 6.2.3.7

The automatic updates seemed to have stopped, and when I try to manually download in system-->updates I get the error:

"download updates failed: Peer certificate cannot be authenticated with known CA certificates"

If I go to the https certificate within local configuration, I see that it is one we installed (a wildcard), and it is expired. However, it has been expired since 2015 and I have done many updates since then, so I'm not sure that is the issue

Has anyone seen this? What is wrong?

Re: Cannot download updates: peer certificate cannot be authenticated

NeerajS — Wed, 21 Nov 2018 15:08:37 GMT

I have an ASA running firepower 6.2.3.7 already. When i do a VRT rule update or VBD update, i am also getting the same error.

Re: Cannot download updates: peer certificate cannot be authenticated

Colin Higgins — Wed, 21 Nov 2018 16:23:27 GMT

So I managed to fix it, but I'm not sure what the issue was

The FMC was pointed to an internal AD DNS server when it was getting the error. I switched the DNS to 8.8.8.8 in the FMC, and it immediately corrected the issue. I am looking at the AD server now to see what happened.

Re: Cannot download updates: peer certificate cannot be authenticated

NeerajS — Wed, 21 Nov 2018 16:33:58 GMT

Hi Colin, That helped. Thanks.