PXE Encryption Failure on C100V

[Garrett Hensley]

We have 2 C100V virtual appliances in a cluster. I have recently setup Cisco Ironport Email Encryption. I have everything setup and it works on one of my Ironports....but not the other. They load balance on sending so when the message is processed by one ironport it works just fine. When it goes through the other one I get the following error:

Remote Server returned '< #5.0.0 smtp; 5.x.3 - PXE Encryption failure. (Message could not be encrypted due to a system configuration issue. Please contact your administrator.) (delivery attempts: 0)>'

Everything on the configuration appears to be done at the cluster level. I also logged into res.cisco.com and verified the SN for each ironport that was added by TAC is correct. Email Security Appliance PXE Encryption is in compliance on both devices under System Administration -> License. I can't think of anything else at the machine level that could be different. I have a TAC case open (over a week now). I feel like it's maybe something on that end, but the error message comes back immediately. 

Any ideas of something I can investigate?

Garrett

 

[Ken Stieers]

Both boxes in the cluster are virtual?

[Garrett Hensley]

Yes, they are both virtual.

[Garrett Hensley · Accepted solution]

I wanted to update on the solution (though not a good one) that fixed my issue. I decided to do an upgrade over the weekend last week. As part of the update a restart is required. After completing the upgrade and restart, both appliances began encrypting mail with no issue. I wish I had a better answer as to what was going on, but TAC was not making progress and this resolved it for me. 

Garrett