dnac cert is missing in catalyst 9300

[parveshtaneja2005]

Seeing following alert on DNAC for multiple switches.

HTTPS is NOT reachable / SCP is reachable
Expected : DNAC certificate has to be installed successfully and Device should be able to reach DNAC via HTTPS
Action : Reinstall DNAC certificate

Anyone can point me to right document to re-install DNAC certificate for cat 9300 switches?

Thanks 

[Mike.Cifelli]

My recommendations:
Ensure http server is enabled on the switch & sourced out the interface that can reach DNAC. Re-provision the device in DNAC. OR find a known good switch with proper DNAC CA configs and copy and paste over. Then troubleshoot from there. You should see pki trustpoint DNAC-CA with a list of commands and see the DNAC-CA certificate. Good luck & HTH!

[parveshtaneja2005]

Ensure http server is enabled on the switch & sourced out the interface that can reach DNAC.

- that is configured and no restriction on source interface.

Re-provision the device in DNAC. OR find a known good switch with proper DNAC CA configs and copy and paste over.

- I will try copy the certificate form working switch and will let you know

Then troubleshoot from there. You should see pki trustpoint DNAC-CA with a list of commands and see the DNAC-CA certificate. Good luck & HTH!

Thanks you..