vManage and CSR1K Service VPN

[stephen.bailey]

We have two CSR1KV edges, one of the edges has a certificate status of "certificate installation failed"

We can attach a template and push config etc. but cannot establish a service VPN.  Is this due to the current certificate status?

vManage version: 20.3.3.1

CSR1KV version: 17.03.03.0.4762

Thanks in advance

SB

[jonatan.cavaco]

Hi, You´re right, you need that all the certificates are ok. If the certificate isn´t installed, the router will not established the ipsec tunnel.

[BryanHefner2568]

in vManage, invalidate and then validate the certificate and see if it comes back in.  I have had to do this a couple of times.  

If that doesnt work, its usually a quick call to TAC to get it resolved.