topic dnac cert is missing in catalyst 9300 in Software-Defined Access (SD-Access)

dnac cert is missing in catalyst 9300

parveshtaneja2005 — Thu, 12 Sep 2019 22:20:57 GMT

Seeing following alert on DNAC for multiple switches.

HTTPS is NOT reachable / SCP is reachable
Expected : DNAC certificate has to be installed successfully and Device should be able to reach DNAC via HTTPS
Action : Reinstall DNAC certificate

Anyone can point me to right document to re-install DNAC certificate for cat 9300 switches?

Thanks

Re: dnac cert is missing in catalyst 9300

Mike.Cifelli — Fri, 13 Sep 2019 13:15:00 GMT

My recommendations:
Ensure http server is enabled on the switch & sourced out the interface that can reach DNAC. Re-provision the device in DNAC. OR find a known good switch with proper DNAC CA configs and copy and paste over. Then troubleshoot from there. You should see pki trustpoint DNAC-CA with a list of commands and see the DNAC-CA certificate. Good luck & HTH!

Re: dnac cert is missing in catalyst 9300

parveshtaneja2005 — Fri, 13 Sep 2019 13:30:14 GMT

Ensure http server is enabled on the switch & sourced out the interface that can reach DNAC.

- that is configured and no restriction on source interface.

Re-provision the device in DNAC. OR find a known good switch with proper DNAC CA configs and copy and paste over.

- I will try copy the certificate form working switch and will let you know

Then troubleshoot from there. You should see pki trustpoint DNAC-CA with a list of commands and see the DNAC-CA certificate. Good luck & HTH!

Thanks you..