ASA FIREPOWER 4100 ASDM ISSUE

[amoth00011]

Hi,

I have a Cisco ASA FPR 4110.

I have gained https access to the management IP which was set up in the original set up. I then provisioned the logical device list with my second management IP address and upgraded the asa code on the box. I can access the management IP via SSH, but I should be able to ASDM and https to it and cannot. 

I receive the below error from IE: But on Chrome it just says it cannot be reached. 

Certificate error: Navigation blocked

Error Code: DLG_FLAGS_INVALID_CA
DLG_FLAGS_SEC_CERT_CN_INVALID

On ASDM, it prompts me for a username and password... but from previously configuring a 4100 I press enter as it does not need credentials but still does not log me in. I have tried other usernames and passwords I have set up also, as well as debugging http from the asa and cannot see any errors. Any ideas? 

TIA for any help!

[Marvin Rhoads]

Have you allocated a separate unique and dedicated management interface for your ASA logical device?

[amoth00011]

Hi Marvin,

Yes I have done this.

[Marvin Rhoads]

Have you assigned a free 3DES-AES license on the ASA logical device?

Have you created an RSA private key ("crypto key generate ...")?

If the above are yes, try opening the Java console while launching ASDM. Watch the output of it for errors.

You could also do a packet capture and look for things like SSL/TLS failing to negotiate a common cipher or more details on the certificate failure.

[amoth00011]

Thanks! 

I will give this a go this week.