12-29-2021 08:33 AM
Hello,
I am receiving the below alert from my firepower 2130 chassis.
--
default Keyring's certificate is invalid, reason: expired
--
Im not sure what this means or potentially affects. Any information would be helpful.
Thanks!
12-30-2021 12:11 AM
- FYI : https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvk26612?rfs=iqvred
M.
06-20-2024 06:52 AM
I found this to be a solution to:
Code - F0853; Description - default Keyring's certificate is invalid, reason: expired
Login to the firewall CLI and enter the following command:
> system support regenerate-security-keyring default
07-30-2024 07:23 AM
Fix for F0853
> system support regenerate-security-keyring default
Fix for F0855
> connect fxos
FW# show fault
**should show something like:
F0853 CLEARED...
F0855 MAJOR...
FW# sysopt sam 1001 on
WARNING: FXOS configuration changes are experimental and are NOT supported.
WARNING: All FXOS changes can be overwritten on next policy deployment.
FXOS option 1001 was enabled.
FW# scope system
FW /system # scope service
FW /system/services # set https keyring default
Warning: When committed, this closes all the web sessions.
FW /system/services* # commit-buffer
Warning: Changes not supported. use: 'connect ftd' to make changes.
FW /system/services # top
FW# scope security
FW /security # delete trustpoint FDM
FW /security* # delete keyring FDM
FW /security* # commit-buffer
Warning: Changes not supported. use: 'connect ftd' to make changes.
FW /security # sysopt sam 1001 off
FXOS option 1001 was disabled.
FW /security # top
FW# show fault
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide