Cannot download updates: peer certificate cannot be authenticated

[Colin Higgins]

I have a FMC 1500 that I am trying to update to 6.2.3.7

The automatic updates seemed to have stopped, and when I try to manually download in system-->updates I get the error:

"download updates failed: Peer certificate cannot be authenticated with known CA certificates"

If I go to the https certificate within local configuration, I see that it is one we installed (a wildcard), and it is expired. However, it has been expired since 2015 and I have done many updates since then, so I'm not sure that is the issue

Has anyone seen this? What is wrong?

[NeerajS]

I have an ASA running firepower 6.2.3.7 already. When i do a VRT rule update or VBD update, i am also getting the same error.

[Colin Higgins]

So I managed to fix it, but I'm not sure what the issue was

The FMC was pointed to an internal AD DNS server when it was getting the error. I switched the DNS to 8.8.8.8 in the FMC, and it immediately corrected the issue. I am looking at the AD server now to see what happened.

[NeerajS]

Hi Colin, That helped. Thanks.