topic 1130AG not joining controller - FAILED CRYPTO INIT in Wireless

1130AG not joining controller - FAILED CRYPTO INIT

ryan.meskill — Sun, 04 Jul 2021 03:32:10 GMT

I am trying to join my 1130AG-E-K9 AP to my 2016 WLC, but it is stuck in a boot loop and will not connect to the controller. The error I'm getting is:

*Mar 1 00:00:29.584: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-CAPWAP-CONTROLLER

*Mar 1 00:00:29.585: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY

*Mar 1 00:00:29.598: %LWAPP-3-CLIENTERRORLOG: LWAPP Crypto Init (SSC): no certs in the SSC Private File

*Mar 1 00:00:29.598: %LWAPP-3-CLIENTERRORLOG: LWAPP Crypto Init: could not start PKI session

*Mar 1 00:00:29.598: %LWAPP-3-CLIENTERRORLOG: Failed to initialize Crypto. Rebooting

*Mar 1 00:00:29.663: %SYS-4-PUPDATECLOCK: Periodic Clock update with ROMMON failed, because size left in ROMMON (4294967295), size needed (29), error code (-1)

*Mar 1 00:00:29.663: %SYS-5-RELOAD: Reload requested by CAPWAP CLIENT. Reload Reason: FAILED CRYPTO INIT.

*Mar 1 00:00:29.664: %LWAPP-5-CHANGED: CAPWAP changed state to DOWNXmodem file system is available.

I found some details here: http://www.cisco.com/en/US/products/ps6366/products_tech_note09186a00808f8599.shtml, but I'm not sure what it means that I have a 'SSC AP'. I am not local to this AP, though I do have a console connection to it-what do I need to do to get it working again? It just continually goes through this error and reboots every 30 seconds or so, so it's useless at the moment.

Thanks!

1130AG not joining controller - FAILED CRYPTO INIT

Surendra BG — Mon, 08 Aug 2011 16:59:28 GMT

Hi,

Please follow the below link to get the APs registered!!

http://www.cisco.com/en/US/products/ps6366/products_configuration_example09186a00806a426c.shtml

Please dont forget to rate the usefull posts!!

Regards

Surendra

1130AG not joining controller - FAILED CRYPTO INIT

ryan.meskill — Mon, 08 Aug 2011 19:48:15 GMT

While that did help me potentially debug the AP, it seems the AP can not/is not reaching the WLC. Debugs on the WLC show other APs talking to it, but the only signature I'm picking up on the WLC from this AP is:

*Aug 08 20:34:36.376: 00:13:5f:fb:b4:f0 Echo Request from 10.50.0.25:44194

*Aug 08 20:34:36.376: 00:13:5f:fb:b4:f0 Echo Response sent to 10.50.0.25:44194

And from the AP itself:

Translating "CISCO-LWAPP-CONTROLLER"...domain server (255.255.255.255)

*Mar 1 00:00:06.475: %LWAPP-3-CLIENTEVENTLOG: Read and initialized AP event (contains, 1024 messages)

*Mar 1 00:00:08.523: %LINK-3-UPDOWN: Interface FastEthernet0, changed state up

*Mar 1 00:00:08.548: %SYS-5-RESTART: System restarted --

Cisco IOS Software, C1130 Software (C1130-RCVK9W8-M), Version 12.4(21a)JA2, RASE SOFTWARE (fc1)

Technical Support: http://www.cisco.com/techsupport

Compiled Mon 02-Nov-09 18:17 by prod_rel_team

*Mar 1 00:00:09.523: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthet0, changed state to down

*Mar 1 00:00:17.310: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthet0, changed state to up

Translating "CISCO-CAPWAP-CONTROLLER"...domain server (255.255.255.255)

*Mar 1 00:00:20.591: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-LWAPP-CONTRER

Writing out the event log to nvram...

*Mar 1 00:00:29.591: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-CAPWAP-CONTLER

*Mar 1 00:00:29.592: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY

*Mar 1 00:00:29.605: %LWAPP-3-CLIENTERRORLOG: LWAPP Crypto Init (SSC): no ce in the SSC Private File

*Mar 1 00:00:29.605: %LWAPP-3-CLIENTERRORLOG: LWAPP Crypto Init: could not st PKI session

*Mar 1 00:00:29.605: %LWAPP-3-CLIENTERRORLOG: Failed to initialize Crypto. Roting

*Mar 1 00:00:29.666: %SYS-4-PUPDATECLOCK: Periodic Clock update with ROMMON led, because size left in ROMMON (4294967295), size needed (29), error code (

*Mar 1 00:00:29.667: %SYS-5-RELOAD: Reload requested by CAPWAP CLIENT. Reloaeason: FAILED CRYPTO INIT.

*Mar 1 00:00:29.667: %LWAPP-5-CHANGED: CAPWAP changed state to DOWN

Is my only option at this point reverting back to a standalone image, then going back to a LW one?

Thanks again,

-Ryan

1130AG not joining controller - FAILED CRYPTO INIT

stefan.angerer — Mon, 08 Aug 2011 22:08:30 GMT

Can you give us some details on how exactly you converted the AP from standalone to controller mode?

(maybe you did not use the lwapp upgrade tool which creates the SSC or some mistake happened during the conversion)

Regards

Stefan