Cert Signing Request is not generated for CSR1k by vManage

[Kanan Huseynli]

Hi team,

I have created SDWAN lab in EVE PRO. vEDGEs are successfully come up. But when I want to bringup CSR1000v image, vManage GUI shows that "CSR FAILED" (this CSR means certificate signing request). What I see is CSR1k connects to vbond , learns vmanage IP, connects to it. But while vmanage generates CSR for CSR1k, it fails somehow. 

I have checked, root CAs are in CSR1k cert database. Chassis ID/Token are corrent. Time sync is OK. I see below log in CLI:

*May 2 18:01:07.245: %DMI-5-AUTH_PASSED: R0/0: dmiauthd: User 'vmanage-admin' authenticated successfully from 172.16.0.1:42023 and was authorized for netconf over ssh. External groups:

So,looks vmanages successfully connects but does not create csr for certificate.

What could be reason that vmanage does not create? 

Controller version 19.2.1 , csr1k version 16.12.1b and 16.12.2r tested

Thanks in advance,

[pgasparovic]

Was this as simple as vManage does not generate CSRs for "vEdge" endpoints, if I remember well?

[pgasparovic]

As I can't delete my own post, I correct myself after yesterday study that this question centered around virtual device was proper one. Good refresher for me to have stumbled upon this one.

[osdesent]

what error you are seeing in the "show sdwan control connection-history" ? Most probably you will need to re-install the rootCA in those cEdges CSR1k

Regards 

[pgasparovic]

Agree, based on my own study alike, that this should be the top culprit of malfunction. But let's assume that guy is not stuck in this for 3/4y now

[Rene MUGIRANEZA]

Hello;

how did you manage to overcome this issue? I am having this problem too.

Regards

[laurent.kubben]

Hi,

I have this exact same issue in my virtual Lab, connections to vManage and vBond are up.

device configurations can also be pushed from vManage, but vSmart connectivity remains down..

vEdges work just fine, they are connected to vSmart as they should be.

Regards.