I'm struggling to use smart licensing & smart software manager on-prem on a virtual FMC (tried with ver. 220.127.116.11, 6.5 and 18.104.22.168).
I've installed Smart Software Manager On-Prem (ver. 7-201910) and succesfully added ESA, ISE and Cat9300 to its inventory using the smart satellite URL (in my case https://ssmop.test.net/Transportgateway/services/DeviceRequestHandler).
As a side note, the domain address is resolvable by my internal lab DNS and its also configured to be the CN of the certificate.
Still, I cannot enroll FMC to this SSM On-Prem VM. I've followed the FMC to smart software satellite enrollment procedure described here:
When I try to add the token that I've generated from SSM On-Prem, FMC throws the following message:
The token you have entered is invalid. It doesn't even tries to contact the on-prem SSM.
Take into account that I've compared a cisco cloud generated token with an on-prem token and they don't match in length.
The same FMC can be added to my cisco (cloud) smart account.
Furthermore, if I add some extra characters to the on-prem generated token just to match the length of the cisco cloud token, FMC seems to analyze the info, connects to the on-prem VM and throws an error afterwards, not in an instant like with the on-prem generated token.
cisco.com token: Yzc2ZGFj123456NhMi00NDIwLTkyZDYtZmE1YjIxY1234561LTE1NzY4NjUwOTMxNDF8SVBRTjE1Mi9SSXRBeXJxUnVvR3pFOHJQMXNrS05FbDZnMm1GNC85Z1hiMD0%3DTT0%3D%0A
Has anyone else encountered this issue?
Solved! Go to Solution.
A couple of things to check here:
1. What is the URL that you are using for the connection to the satellite server and does that match the CN (Common Name) of the certificate installed on the satellite server?
2. Is DNS properly configured so the FMC can resolve the URL mentioned above?
Thank you for rating helpful posts!
Belive me, I've checked all that. I you read closely my post, you'll see that FMC doesn't even try to connect to SSM.
It's like it doesn't validate the input. I've tried with several tokens generated from SSM On-Prem, not just one. All of them are shorter than their cloud version.
The domain is lab only and it's resolvable by FMC.
nslookadmin@fmcv:~$ nslookup ssmop.test.net
The CN is correct on SSM On-Prem. The same URL based on domain name has been succesfully used on Cat9300, ISE and ESA.
I have exactly the same problem. My solution was to re-install the SSMS On-Prem, I choose the previous version, I`m glad that I only have a couple of devices in my deployment that are using SSMS.
Thanks for your feedback. Can you please check the version that you're using?
Still, doesn't feel right that SSM On-Prem hasn't been tested before being released.