topic 5520 lost certificates - new CIMC web gui in Wireless

5520 lost certificates - new CIMC web gui

rsvcsc — Sun, 22 Feb 2026 20:33:47 GMT

Rebooted 2 anchored 5520 WLCs. WLC went fine. WLC 2 lost the factory certificates.

The only instructions I can find for this bug are based on an old, very different CIMC gui.

Does anyone have steps to resolve the FlexFlash issue using this new interface?

Here are supporting logs:

WLC2 when AP attempts to join:

*spamApTask3: Feb 22 19:06:03.421: %SSHPM-3-CERT_TABLE_INVALID: sshpmcert.c:912 Accessing certificate table before initialization
*nmspRxServerTask: Feb 22 19:06:00.856: %NMSP-3-INIT_FAIL: locp_task.c:2796 NMSP Task failed to initialize. Failed to initialize the SSL module
*nmspRxServerTask: Feb 22 19:06:00.856: %SSHPM-3-ID_CERT_TABLE_INVALID: sshpmcert.c:1248 Accessing identity certificate table before initialization
*spamApTask0: Feb 22 19:05:55.823: %CAPWAP-3-DTLS_DB_ERR: capwap_ac_sm.c:10130 80:24:8f:2c:07:fb: Failed to create DTLS connection for AP 10.17.21.26 (5264).
*spamApTask0: Feb 22 19:05:55.823: %DTLS-3-PKI_ERROR: openssl_dtls.c:552 PKI initialization error : Certificate initialization failed
*spamApTask0: Feb 22 19:05:55.823: %LOG-3-Q_IND: sshpmcert.c:912 Accessing certificate table before initialization
*spamApTask0: Feb 22 19:05:55.823: %SSHPM-3-CERT_TABLE_INVALID: sshpmcert.c:912 Accessing certificate table before initialization
*nmspRxServerTask: Feb 22 19:05:50.848: %NMSP-3-INIT_FAIL: locp_task.c:2796 NMSP Task failed to initialize. Failed to initialize the SSL module
*nmspRxServerTask: Feb 22 19:05:50.848: %SSHPM-3-ID_CERT_TABLE_INVALID: sshpmcert.c:1248 Accessing identity certificate table before initialization
*nmspRxServerTask: Feb 22 19:05:40.840: %NMSP-3-INIT_FAIL: locp_task.c:2796 NMSP Task failed to initialize. Failed to initialize the SSL module

========

9130 AP logs

[*02/22/2026 19:01:11.7885] CAPWAP State: Discovery
[*02/22/2026 19:01:11.7898] Got WLC address 10.254.254.35 from DHCP.
[*02/22/2026 19:01:11.7898] Got WLC address 10.254.254.30 from DHCP.
[*02/22/2026 19:01:11.8110] Discovery Request sent to 10.254.254.35, discovery type STATIC_CONFIG(1)
[*02/22/2026 19:01:11.8127] Discovery Request sent to 10.254.254.30, discovery type STATIC_CONFIG(1)
[*02/22/2026 19:01:11.8143] Discovery Request sent to 255.255.255.255, discovery type UNKNOWN(0)
[*02/22/2026 19:01:11.8144] Discovery Response from 10.254.254.35
[*02/22/2026 19:01:22.0003]
[*02/22/2026 19:01:22.0003] CAPWAP State: DTLS Setup
[*02/22/2026 19:02:19.0275]
[*02/22/2026 19:02:19.0275] CAPWAP State: DTLS Teardown
[*02/22/2026 19:02:19.0906] upgrade.sh: Script called with args:[ABORT]
[*02/22/2026 19:02:19.1226] do ABORT, part2 is active part
[*02/22/2026 19:02:19.1409] upgrade.sh: Cleanup tmp files ...
[*02/22/2026 19:02:19.1658] Discarding msg CAPWAP_WTP_EVENT_REQUEST(type 9) in CAPWAP state: DTLS Teardown(4).
[*02/22/2026 19:02:19.1658] Discarding msg CAPWAP_WTP_EVENT_REQUEST(type 9) in CAPWAP state: DTLS Teardown(4).
[*02/22/2026 19:02:23.7825] No more AP manager addresses remain..
[*02/22/2026 19:02:23.7826] No valid AP manager found for controller 'mcle-wlc2' (ip: 10.254.254.35)
[*02/22/2026 19:02:23.7826] Failed to join controller mcle-wlc2.
[*02/22/2026 19:02:23.7826] Failed to join controller.

====

Also

(Cisco Controller) >show certificate all

--------------- Verification Certificates ---------------

-------------- Identification Certificates --------------

Re: 5520 lost certificates - new CIMC web gui

Flavio Miranda — Mon, 23 Feb 2026 00:25:31 GMT

@rsvcsc

Check the Virtual driver.

If Virtual Drive is missing

You need to recreate it:

Click Create Virtual Drive
Select both FlexFlash physical drives
Set RAID level to Mirror
Initialize → Quick Init (NOT full)

Use Quick Initialization, not full wipe.

Full wipe destroys manufacturing data permanently.

Re: 5520 lost certificates - new CIMC web gui

Hafthor Hilmarsson O'Connor — Mon, 23 Feb 2026 08:49:26 GMT

I think the FlexDrive is not relivant to this at all, that just a SD card interface in the HW, and yours is saying there are no cards, normally as far as I know this is just an option on the hardware, and most HW I have seen do not come with this populated.

You can regenerate the Cert on the CIMC, however I think this is also not relivant to your error, I think your error is inside the WLC it self , not the CIMC.
Check your Certs on the WLC.

Re: 5520 lost certificates - new CIMC web gui

Hafthor Hilmarsson O'Connor — Mon, 23 Feb 2026 08:50:09 GMT

Sorry this looks like a bad AI respons here...

Re: 5520 lost certificates - new CIMC web gui

Flavio Miranda — Mon, 23 Feb 2026 09:57:27 GMT

@Hafthor Hilmarsson O'Connor

I stand for my answer. And I dont appreciate you commenting other people's responses. If you think you know everything because you hold a CCIE, you are wrong.

People come here to help, not to judge or to show up themselves because they hold a F**** title. Direct your answer and comments to the requester of the query.

Although this is a new version of the UCS interface, the procedure I provide is documented in order CIMC versions.

file:///C:/Users/FlavioMiranda/Downloads/8540_5520_cert_recover_0.pdf

This is related to the Bug CSCuv97685.

Re: 5520 lost certificates - new CIMC web gui

rsvcsc — Tue, 24 Feb 2026 14:52:26 GMT

If you see above, I have no certs on the WLC. That is what I am working on. I was looking at a flexflash virtual drive issue being the cause. I don't know what you are suggesting I check outside of show cert all. Results in OP.

Re: 5520 lost certificates - new CIMC web gui

rsvcsc — Tue, 24 Feb 2026 14:56:34 GMT

I do not have an option in CIMC that I can find for Create Virtual Drive. Nothing in the Virtual Drive tab. Looked at Configure Cards link but that is a little different. And doesn't give an option on Virtual Drives. It looks like this screen.

Re: 5520 lost certificates - new CIMC web gui

rsvcsc — Tue, 24 Feb 2026 15:00:13 GMT

Also, after the initial reboot, the CIMC logs showed the following fault:

Critical

F1261

sys/rack-unit-1/board/storage-flexflash-FlexFlash-0/vd-1

equipment-inoperable

Flex Flash Virtual Drive 1 (Hypervisor) is Inoperable: Check flex controller properties or Flex Flash

Which makes me think it is relevant. But I am no expert at this point. Just looking for help. Thanks.

Re: 5520 lost certificates - new CIMC web gui

Flavio Miranda — Tue, 24 Feb 2026 15:27:50 GMT

@rsvcsc

What is the version of this CIMC ?

Re: 5520 lost certificates - new CIMC web gui

rsvcsc — Tue, 24 Feb 2026 15:52:19 GMT

Firmware 4.0(1a)

Bios C220M4.4.0.1c.0.0711181559

I compared to functional WLC1 and they are the same versions.

When I try to create a Virtual Drive using the above "configure cards" I save and get an error "no SD cards"

That can be seen on the General tab screenshot above:

Controller Status: No SD cards Available in Slots

Re: 5520 lost certificates - new CIMC web gui

rsvcsc — Tue, 24 Feb 2026 15:56:18 GMT

I'm going to shut down and re-seat.

Re: 5520 lost certificates - new CIMC web gui

Mark Elsen — Tue, 24 Feb 2026 16:09:57 GMT

- @rsvcsc Ref : https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/c/sw/fault/reference/guide/b_Cisco_UCS_IMC_Faults_Reference_Guide/b_Cisco_UCS_IMC_Faults_Reference_Guide_chapter_01001.pdf
>...
>
fltStorageFlexFlashVirtualDriveInoperable
Fault Code
F1261

Description
Flex Flash Virtual Drive 5 (Hypervisor) is Inoperable: Check flex controller properties or Flex Flash disks.

Explanation
This fault indicates a non-recoverable error with the Flex Flash virtual drive.

Recommended Action
If you see this fault, take the following actions:
1. If the data on the drive is accessible, back up and recreate the virtual drive. Optimize the virtual drive
either by manually syncing through CIMC Web UI, or by selecting auto-sync option when creating the
virtual drives.

2. Replace any faulty Flex Flash drives.
Before replacing this component, see the server-specific Installation and Service Guide for prerequisites,
safety recommendations, and warnings.

3. If the problem still persists, create a tech-support file and contact Cisco TAC