Problem with trial registration

[Magnus Eriksson]

Hi!

I'm having problem registration the smartnet collector with a trial version.

I'm getting the following error message "Failed to download registration file from Cisco Backend. Please try again." after entering my CCO credentials.

I've checked but it should not be any firewall that blocks access to the cisco backend. Is there something with my account that makes it impossible to create a trial account?

Best Regards

[Justin Sprake]

Hi Magnus,

Could you confirm if you are encountering this error at the CSPC webUI or at the PSS/SNTC portal?

[Magnus Eriksson]

It's at the CSPC webUI I'm getting the message.

[Justin Sprake]

Hello,

If you have access to the CSPC CLI, please execute the below command to test connectivity:

As collectorlogin / root:
#wget https://72.163.7.113/HeadEndWebAppServlet/ --no-check-certificate

[Magnus Eriksson]

Hi

It's working however same issue when trying to register the collector with any service (trial) "Failed to download registration file from Cisco Backend. Please try again."

# wget https://72.163.7.113/HeadEndWebAppServlet/ --no-check-certificate 
--2018-06-29 15:54:21--  https://72.163.7.113/HeadEndWebAppServlet/
Connecting to 72.163.7.113:443... connected.
    WARNING: certificate common name “sora.cisco.com” doesn't match requested host name “72.163.7.113”.
HTTP request sent, awaiting response... 302 Found
Location: https://sso.cisco.com/obrareq.cgi?wh%3DConn-Prod%20wu%3D%2FHeadEndWebAppServlet%2F%20wo%3D1%20rh%3Dhttps%3A%2F%2F72.163.7.113%20ru%3D%252FHeadEndWebAppServlet%252F [following]
--2018-06-29 15:54:21--  https://sso.cisco.com/obrareq.cgi?wh%3DConn-Prod%20wu%3D%2FHeadEndWebAppServlet%2F%20wo%3D1%20rh%3Dhttps%3A%2F%2F72.163.7.113%20ru%3D%252FHeadEndWebAppServlet%252F
Resolving sso.cisco.com... 72.163.4.70
Connecting to sso.cisco.com|72.163.4.70|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://cloudsso.cisco.com/sp/startSSO.ping?SpSessionAuthnAdapterId=standard&TargetResource=https://sso.cisco.com/autho/login/loginaction.html [following]
--2018-06-29 15:54:22--  https://cloudsso.cisco.com/sp/startSSO.ping?SpSessionAuthnAdapterId=standard&TargetResource=https://sso.cisco.com/autho/login/loginaction.html
Resolving cloudsso.cisco.com... 72.163.4.74, 2001:420:1101:4::b
Connecting to cloudsso.cisco.com|72.163.4.74|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 10477 (10K) [text/html]
Saving to: “index.html”

100%[===============================================================================================================================================================================================>] 10,477      --.-K/s   in 0.1s    

2018-06-29 15:54:23 (71.4 KB/s) - “index.html” saved [10477/10477]

[Justin Sprake]

Hello,

Could you also confirm if the following entry is found:

grep 'Socket connection failed' /opt/cisco/ss/adminshell/applications/CSPC/logs/cspc_logging.log

You will need to be logged in to the root user to run the above command.

[Magnus Eriksson]

Here is the output.

[root@x]# grep 'Socket connection failed' /opt/cisco/ss/adminshell/applications/CSPC/logs/cspc_logging.log 
[ERROR] [2018-04-05 14:11:55,932] : [com.pari.logger.LoggerThread] [run] [Thread=Thread-58][Class=com.pari.mw.api.mgmt.AdminshellChannel][Method=getAdminshellChannel][line=58][Module=XmlApi][Socket connection failed,java.net.ConnectException: Connection refused (Connection refused)Retrying again after 5 seconds
[root@x]# 

[Justin Sprake]

Hi Magnus,

It looks like there is an issue with CSPC 2.7 and the Trial Certificate feature. I'll confer with the engineering team to determine what options are available and follow up shortly.

[Magnus Eriksson]

Hey Justin,
Thanks for the info. Do you have any new information regarding this? It seems like you're only able to download the 2.7.x version from cisco now?

[Justin Sprake]

Hi Magnus,

Unfortunately, we do not have any new information from a technical perspective though I believe this is an issue affecting the CSPC specifically. If you are able to create a certificate on the SNTC portal there should not be any expectation of entitlement failure despite the issue you have encountered with the Trial mode.

Have you also experienced this problem with the 2.7.4 image as well?

[Magnus Eriksson]

Running 2.7.4(Collector-2.7.4-B-36.ova) at the moment will see if we can do a reinstall to 2.7 version and see if that works better.