03-14-2023 05:53 AM
I am running ISE 3.1 patch-5 on SNS-3655 and for the past two weeks, I am getting these messages via email every hours from the ISE:
- Smart Licensing Authorization Expired: Details=AuthorizedPeriodExpired.
- Smart Licensing Id Certificate renewal failure: Details=Invalid response from licensing cloud.
- Smart Licensing Authorization Expired: Details=Smart Licensing authorization expired
I searched the bug ID and it looks similar to this CSCwa13877; however, the issue was related to Cisco DataCenter and it was resolved more than a year ago. Furthermore, it is fixed in 3.1 patch 2 or patch 3 and I am currently on patch-5.
Any ideas?
Solved! Go to Solution.
03-17-2023 04:26 AM
Hi @Arne Bier: I got the problem resolved and here is what I did, even though ISE is allowed to communicate with smartreceiver.cisco.com:
1- Upgraded to patch-5,
2- reboot,
3- after reboot, the ISE still communicated with tools, tools1, tools2, and tools3.cisco.com,
4- De-register & Register the ISE node with a new token from the licensing portal,
5- after step 4, the ISE no longer communicates with tools.cisco.com, only with smartreceiver.cisco.com,
I think the documentation from Cisco needs to be updated when patch-5 is applied to the system, IMHO.
05-11-2023 08:43 AM
Thank you! Re-registering with a new token resolved the problem for me.
03-16-2023 03:10 PM
This situation varies over time and if you've done everything right on your end (i.e. have all the correct trusted certs in ISE, and ISE can talk out to the internet) then the issue could be the intermittent nature of the Cisco service.
Having said that - as you know, since patch 5, ISE talks to a new URL - it used to be tools.cisco.com - now it's smartreceiver.cisco.com
Has this been looked into?
I am actively avoiding patch 5 because of the issue with Cisco phone certs (CAPF-signed) not working due to some TLS issue.
03-17-2023 04:26 AM
Hi @Arne Bier: I got the problem resolved and here is what I did, even though ISE is allowed to communicate with smartreceiver.cisco.com:
1- Upgraded to patch-5,
2- reboot,
3- after reboot, the ISE still communicated with tools, tools1, tools2, and tools3.cisco.com,
4- De-register & Register the ISE node with a new token from the licensing portal,
5- after step 4, the ISE no longer communicates with tools.cisco.com, only with smartreceiver.cisco.com,
I think the documentation from Cisco needs to be updated when patch-5 is applied to the system, IMHO.
05-11-2023 08:43 AM
Thank you! Re-registering with a new token resolved the problem for me.
06-19-2023 11:29 AM
Does re-registration interupt services?
06-19-2023 11:30 AM
Adamscottmaster2013,
Did the re-register require a maintenance window? Does it interupt services?
06-20-2023 05:58 AM
@DannyDulin: I couldn't tell because the ISE that I have only uses for Device Administration and not 802.1x, wired, wireless. Therefore, I didn't notice any interruption during the re-registration of the licensing. YMMV.
01-17-2024 10:47 AM
I am experiencing this issue and plan to use a maintenance window. As I understand it, there is no interruption if the evaluation period still has some time on it. However, I experienced a bug a while back that TAC had to fix that depleted the our evaluation period. So, I suspect there may be an interruption when I do the fix. I was planning to upgrade to 3.2.0, patch 8, but think I'll fix this first.
Does anyone know if upgrade to 3.2.0 resolves the issue without having to deregister/re-register? Or do you still have to fix the registration?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide