Satellite Server Connection Issues

[WilliamHamilton02800]

I have setup a SSM On-Prem satellite server to manage the Smart Licenses on our internal Network. I have been able to get it to publish smart licenses to my firewalls that had no license on them. I am currently attempting to connect my ISR 1100(17.3) Series routers to the server in order to convert their traditional licenses into smart licenses.

After following the Configuration Guide for the 1100 Series I am now getting the following error when using the Smart Transport URL:

SMART_LIC-3-COMM_FAILED: Communications failure with the Cisco Smart Software Manager (CSSM) : Received empty response from serv

When I attempt to use the Call-Home URL I get the following Error:

SMART_LIC-3-COMM_FAILED: Communications failure with the Cisco Smart Software Manager (CSSM) : Fail to parse response data from SCH server.

Here is my current Config for it

Snip
no license feature hseck9
license udi pid XXXX sn XXXXX
license smart url https://<On-Prem IP>/SmartTransport
license smart url cslu https://<On-Prem IP>/SmartTransport
license smart url smart https://<On-Prem IP>/SmartTransport
license smart transport smart
Snip
ip http server
ip http authentication local
ip http secure-server
ip http client source-interface GigabitEthernetX/X/X
ip forward-protocol nd
Snip
call-home
 contact-email-addr email@domain.domain
 no http secure server-identity-check
 profile "License"
  reporting smart-licensing-data
  destination transport-method http
  destination address http https://<On-Prem IP>/SmartTransport

Any ideas would be super helpful, I've only just started working on Smart Licensing as a whole so I'm still fumbling through it.

[balaji.bandi]

check my Blog :

https://www.balajibandi.com/?p=1286

[WilliamHamilton02800]

If I'm reading this correctly, with this config

crypto pki trustpoint TP-self-signed xx
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate xx
 revocation-check none
 rsakeypair TP-self-signed xx
!
crypto pki trustpoint SLA-TrustPoint
 enrollment terminal
 revocation-check none
!
!
crypto pki certificate chain TP-self-signed xx
 certificate self-signed 01
****
        quit
crypto pki certificate chain SLA-TrustPoint
 certificate ca 01
****

You're saying to do

no crypto pki certificate chain SLA-TrustPoint

After doing that It was recreated after issuing the Registration Command. This time without a visible Certificate. 

As for the DNS settings I don't  have one configured for this stand alone network. For my Prem server I'm still using an IP for the Hostname.

[WilliamHamilton02800 · Accepted solution]

I asked around some more and was informed that SSM On-Prem doesn't support the new CSLU at this time which is most likely causing my issue when using version 17.3.3 IOS XE. I went ahead and backported to 16.12.05 and my device registered on the first try with no configuration changes. I am currently starting the DLC process to convert the license via my Satellite Server.

If anyone has any idea on how long it normally takes or if I need to ReSync my Server to complete please let me know. However the original question has been answered so I'll be marking this as the solution.

[nicolas_dreher]

Got the same situation here :

- ISR 1100 17.3.3

- SSM On-Premise v8

--> I tried to use the classical callhome parameter at first : KO

--> then the licensing support told me to upgrade the SSM to the last version so the CSLU transport will be OK : done

--> tried the different transport options :

    - cslu : KO as expected (CSLU and SSM On-Prem are 2 different modes)

    - smart : KO : url is not customizable

    - callhome : the router reaches the SSM On-Prem, but the server response is empty

Does anyone know about a future release that allow the use of 17.3+ with SSM On-Prem ? (my customer would prefer a Linux VM rather than the CSLU Windows app, even wit the CentOS 7 end-of-support approaching)

[ch.geissler]

hi, i have the same with a wlc 9800 and on prem ssm ver. 8-202112

anyone got it working??

regards

[Filip Po]

same issue here with Cat9500 and 17.3.3 and CSSM On-Prem.

Even documentation for Cat9500 IOS XE 17.3.x is not updated. Using license smart register tokenid command.

[mikburns]

The problem that I see with the config is having the same URL for Smart transport as for CSLU.  There is a different URL.

See: Solved: Re: Communications failure with the Cisco Smart License Utility (CSLU) - Cisco Community