Unable to launch Device Manager - ASDM issue

[anthonyludlow]

Hi There,

I have recently upgraded our spare ASA 5510 router to version 9.1(3) with ASDM image Version 7.1(5)100.

The client i'm attempting to run the ASDM launcher on is Windows 7 x64 running the latest version of Java (7 update 5).

I am able to get to the main screen when I https to the device.  I can install the ASDM launcher, but once I enter the hostname and Password I receive the following error "Unable to launch Device Manager 192.168.X.XXX".

I have gone through a check list and I can confirm the following:

- the 3des-sha1 licence is enabled

- Http server is enabled for my clients subnet

- ssl encryption is enabled

- Tried Firefox and IE10

When I attempt to run the ASDM via the browser I get as far as asking for the password and although the initial prompt seems to accept it, another authentication box appears asking for it over and over again in an endless loop.

I have been through many forum posts and check lists, but cannot seem to pinpoint this problem.

If it helps, the box was previously flashed back to factory-default before I then applied the configuration from scratch (based on the config of our live ASA 5510).

Can somebody help please?

Thanks

[owilson2k]

Thanks nguyenxuanthuyet  :) that worked for me.

[vizualpro]

I ran into a VERY similar problem and was loading all the certificates into Java with no luck. For those of you like me, please be aware that if you're using AES-256 encryption ASDM will not work unless you have JCE version of Java installed. After installing it came right up! 

https://supportforums.cisco.com/discussion/12729756/asdm-aes-256-not-supported#comment-11388121

http://www.cisco.com/c/en/us/support/docs/security/adaptive-security-device-manager/110282-asdm-tshoot.html#prblm13

[zhangmarco]

Mybe your device has been update by high version IOS. The ASDM access link has been changed in the new version IOS. You can input javaws https://xxx.xxx.xxx.xxx/admin/public/asdm.jnlp in the Start - Run to open the ASDM console.

www.eumarine.com

[ml1witten]

I have been going through this with every Java update for the last few years.   I set the security for the site to trusted, security to high (lowest it will go).

Problem is, every version defaulted to the non-export-grade encryption.  You want to use "unlimited" grade (search for it).  Oracle says that starting with 8_162 they now default to unlimited.

https://golb.hplar.ch/p/JCE-policy-changes-in-Java-SE-8u151-and-8u152

Note that the actual files you need to replace have not changed since 2013 or 2014.

http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html

I am on .151, and can tell you I had to do it manually again.  Once files moved, closed and reopened application and it worked fine.

So, Java settings that work for me are high, added IP to trusted (it was a local), and made sure I had the unlimited files in the security directory.

Hope this helps someone...

[Bouya]

this help me

[kraft.70]

Hi,

I know its solved, but for all reading this discussion it may be useful.

In my case the problem was, that I have got a new hardware with the newest software image (both ASDM and ASA*.SPA). After aplying my old config I changed only the name of ASA image but I forgot to change an ASDM image entry in config to point to new ASMD image.

So check the asdm image name from config i.e.

sh run | inc asdm

asdm image disk0:/asdm-792.bin

then find out if such file  exists on filesystem.

dir disk0:

Directory of disk0:/

112    -rwx  29197128     07:26:18 Mar 05 2018  asdm-791-151.bin
113    -rwx  32738292     03:02:58 Apr 16 2018  asdm-792.bin

[og-ops-be]

Recent versions of Java seem to break the connection to older versions of the firmware. The recommended "fix" from Cisco is to upgrade to a newer version - which is really convenient for them since this requires an active support contract for the device in question (ie it costs money).

In some cases (but sadly not all!) it may help to adjust a setting in Java. Try this first:

1.) Open your Java Control Panel (for example by launching "Configure Java" in your start menu) 2.) Go to the Advanced tab 3.) Scroll down to Advanced Security Settings 4.) Locate option "Use SSL 2.0 compatible ClientHello format 5.) Enable this option by setting the checkbox 6.) Restart your Java environment. Make sure you have ASDM closed

This fixed our Issue.

Prabu SP

[willsmithpbgg]

Thanks mate!! you people saved my day.. its working fine for me also..

[elonmaski]

I am also facing the same issue, I can install the ASDM launcher, but once I enter the hostname and Password I receive the following error "Unable to launch Device Manager 192.168.X.XXX".

[Claritine]

I've seen occasionally proxy settings can block ASDM to connect. Check your browser settings and turn off proxy, maybe it can help.