Catalyst 9300 and Smart Licensing using Policy issues

[kerstin-534]

Most Catalyst 9300 switches using 17.12.4 cannot communicate with CSSM either with proxy or not, it does not matter. All of them has last sucessful contact 10th November 2024. Wireshark traces shows that switch can successfully communicate with CSSM.

Can somebody explain the root case for this issue and how to fix this ?

sh license tech support ->
Usage Reporting:
Attempts: Total=151, Success=2, Fail=149 Ongoing Failure: Overall=149 Communication=149
Last Response: FAILED TO CONNECT TO SERVER on May 07 08:22:17 2025 MEST
Failure Reason: Connection timed out
Last Success Time: Nov 10 08:10:50 2024 MEST
Last Failure Time: May 07 08:22:17 2025 MEST

switch5#sh run | sec smart
license smart url https://smartreceiver.cisco.com/licservice/license
license smart url smart https://smartreceiver.cisco.com/licservice/license
license smart transport smart
license smart proxy address x.x.x.x
license smart proxy port 8080

[pieterh]

1) did  the cssm had an recent upgrade ?
    isn't it that Cisco is moving away from smart transport ?
2) is the certificate on the cssm properly recognized?
    when i open smartreceiver.cisco.com/licservice/license in abrowser

     -> certificate is issued on fryday 13 september 2024 at  02:00:34
     looks like 30 days later your problem starts ->re-register or re-auth to the CSSM
3) check time(zone)  settings 10 nov is shortly after summertime has ended ?

[kerstin-534]

Upgrade from 17.12.4 to 17.12.5 helped. The same certificates are in the trustpool as before the upgrade. No bugs visible in bug search tool.