Showing results for 
Search instead for 
Did you mean: 

Welcome to the Smart Net Total Care Community!

Our community includes Cisco experts to answer your questions about the Smart Net Total Care (SNTC) portal and CSP-Collector.
Click the navigation links below to access materials for using our service and supported collectors.


How do I gain access to my CSP Collector Server now that my Browsers have been updated to the latest versions and no longer support the old HTTPS certificate?

We deployed in the 1.x portal and successfully migrated to 3.x. We are at the point where we need to update whats being collected and access the collector software, however, when we, as registered users, try to log into the collector we get an error message saying "Server has a weak ephemeral Diffie-Hellman public key." 


How can we fix this and access the collector? This is very frustrating...


Unfortunately, I cannot open a service request at this time.



Cisco Employee

Hi Alexander,

We moved your question to the Smart Net Total Care community now so that a peer or Cisco expert can see it and respond. Feel free to save the link to this community and come back with any other questions you may have.

Apologies for the confusion with the choices of communities to post in (I have reported the issue already and will follow up for a fix) but now you are in the right community and your question will be answered soon. In the meantime, please let me know if you had other questions but was not able to post here and I will post them for you.

Welcome to the community!  



Regards, Sandra Kindly remember to mark questions as answered and please rate posts and answers if you find them helpful.
Lynden Price
Cisco Employee

Hi Alexander,

This workaround only works in Firefox 39 or higher. Here is what you can do:

1) Navigate to "about:config" by entering it into the URL bar

2) Click accept

3) Search for "security.ssl3.dhe_rsa_aes" in the search bar on this page (not the firefox search bar)

4) Check both of those values to false

This is bypass the security check that Firefox does for logjam. Since this is a server internal to your network, it shouldn't pose a problem. Please remember to turn it back on once you've gathered the necessary data from the collector. The newest version of the collector image (2.5) does not have this issue. You should deploy that when possible.


Thanks Lynden. How do I deploy the newest version 2.5?



It's actually due to be released soon, but as a new OVA. For now, you can grab your managed device list, credentials, and user accounts from your current collector, and then it should be easy to import those into the new one once you've hosted the OVA.

I can give you more details on how to do that if you have any questions.



Oussama Mbarek

Try to use internet explorer, it works for me