SFTP Repository issue

[rishisemwal]

Hello,

I have reconfigured SFTP after changing the IP address of ISE server. It's not generating the RSA key 

UNMISS-BEN-ISE/admin# crypto host_key add host 10.155.22.9
host key fingerprint added
Operating in CiscoSSL FIPS mode

UNMISS-BEN-ISE/admin# debug transfer 7
UNMISS-BEN-ISE/admin# sh repository sftp
% Error: Repository sftp could not be accessed. In case Backup was Restored on different setup, Please reconfigure the repository passwords (expected behaviour).
3 [18261]:[error] transfer: cars_xfer.c[204] [admin]: couldn't get repository sftp
% Repository not found
UNMISS-BEN-ISE/admin#

#. I used following command to remove old key and reconfigure but same issue.

1. ssh delete host X.X.X.X
2. crypto host_key delete host X.X.X.X

Many many thanks for your support

Thanks

Rishi

[balaji.bandi]

what is the ISE version here ? have you tested the SFTP outside ISE, is that works ?

[rishisemwal]

We are using version 3.0. It was working before, since we changed the IP address of ISE server and reconfigured SFTP. I don't see RSA key when I add host in CLI.

[Arne Bier]

Have you tried deleting any crypto host entries, and then reboot the ISE node and try adding the crypto host again?

Are you able to ssh from that ISE node to the SFTP IP address?

If TCP/22 between ISE and SFTP is fine, then this might require a TAC case to look deeper. If you changed ISE IP address then perhaps something is stuck in the Oracle database ?

[rishisemwal · Accepted solution]

 I have used following command to remove old key and reconfigure the same but not solved the issue. 

1. ssh delete host X.X.X.X
2. crypto host_key delete host X.X.X.X

#  I'm not getting RSA key when I added host key in CLI

UNMISS-BEN-ISE/admin# crypto host_key add host 10.155.22.9
host key fingerprint added
Operating in CiscoSSL FIPS mode

UNMISS-BEN-ISE/admin#