Catalyst 9300 - 17.09.04a - Certificate Error

[benshitritori1]

I got on DNAC the following certificate error on a few Catalyst 9300 switches:
"the following certificates were part of the certificate chain sent by the remote host, but contain hashes that are considered to be weak subject"

"An SSL certificate in the certificate chain has been signed using a weak hash algorithm."

The current version - Cisco IOS XE Software, Version 17.09.04a
Model - C9300L-48P-4X

There is a way to solve it except upgrade firmware?

Thanks in advance

[Reza Sharifi]

Have a look at this document. Maybe upgrading the severe certificate can help in resolving the issue:

https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/hardening_guide/b_cisco_catalyst_center_security_best_practices_guide.html#task_zpl_4c2_rbb

HTH

[robad]

Reza, Do you think that upgrade the IOS version will solve the user's issue also ? [I know he prefer not to, but just asking]

[Reza Sharifi]

I am not sure if upgrading the IOS alone can solve the issue but it is worth a try.

From the document, it appears that the certificate needs to be updated.

HTH

[benshitritori1]

Hi,
Thanks for your reply

We don't have "cisco catalyst center" for that
There is another way to do it without it?