ISR4321 K9

[jmartinez20]

Hello Cisco Community,

I get the following error when I do show license status.   Is this normal? perhaps a bug or defective unit?  Thanks for your help in advance!

Device Credential Verification: FAIL

Router# sh license status
License Type Supported
permanent Non-expiring node locked license
extension Expiring node locked license
evaluation Expiring non node locked license
evalRightToUse Right to use evaluation non node locked license
rightToUse Right to use non node locked license

License Operation Supported
install Install license
clear Clear license
annotate Comment license
save Save license
revoke Revoke license
call-home License call-home

Call-home Operation Supported
show pak Display license pak via call-home
install Install license via call-home
revoke Revoke license via call-home
resend Fetch license via call-home

Device status
Device Credential type: DEVICE
Device Credential Verification: FAIL
Rehost Type: DC_OR_IC

[Leo Laohoo]

What firmware is the appliance running on?

[jmartinez20]

System returned to ROM by reload
System image file is "bootflash:isr4300-universalk9.03.14.00.S.155-1.S-std.SPA.bin"

[Leo Laohoo]

Router is running 3.14.0 .  The last digit is "0".  Which means the router potentially reloaded with a crash. 

Post the complete output to the command "dir crashinfo:". 

You might want to seriously reconsider upgrading the firmware to something more recent.

[jmartinez20]

Thank you for the response, I updated IOS and still get the same error.

 bootflash:isr4300-universalk9.16.06.03.SPA.bin

Router uptime is 16 minutes
Uptime for this control processor is 19 minutes
System returned to ROM by Reload Command
System image file is "bootflash:isr4300-universalk9.16.06.03.SPA.bin"
Last reload reason: Reload Command

Router# dir
Directory of bootflash:/

11 drwx 16384 May 8 2020 00:36:03 +00:00 lost+found
64257 drwx 4096 May 27 2020 23:04:39 +00:00 .prst_sync
12 -rw- 421580388 May 8 2020 00:45:27 +00:00 isr4300-universalk9.03.14.00.S.155-1.S-std.SPA.bin
80321 drwx 4096 May 27 2020 23:02:19 +00:00 .installer
112449 drwx 4096 May 27 2020 23:04:55 +00:00 core
160641 drwx 4096 May 8 2020 00:49:17 +00:00 .rollback_timer
13 -rw- 0 May 8 2020 00:49:24 +00:00 tracelogs.098
176705 drwx 12288 May 27 2020 23:20:00 +00:00 tracelogs
14 -rw- 549962392 May 27 2020 22:46:21 +00:00 isr4300-universalk9.16.06.03.SPA.bin
15 -rw- 30 May 27 2020 23:04:39 +00:00 throughput_monitor_params

3232477184 bytes total (2095382528 bytes free)
Router#
Router#
Router#dir cras
Router#dir crashinfo
%Error opening bootflash:/crashinfo (No such file or directory)
Router#

----------------------------------------------------------

Router#show license status
License Type Supported
permanent Non-expiring node locked license
extension Expiring node locked license
evaluation Expiring non node locked license
evalRightToUse Right to use evaluation non node locked license
rightToUse Right to use non node locked license

License Operation Supported
install Install license
clear Clear license
annotate Comment license
save Save license
revoke Revoke license
call-home License call-home

Call-home Operation Supported
show pak Display license pak via call-home
install Install license via call-home
revoke Revoke license via call-home
resend Fetch license via call-home

Device status
Device Credential type: DEVICE
Device Credential Verification: FAIL
Rehost Type: DC_OR_IC

SWIFT url status
Swift URL set to default value : https://tools.cisco.com/SWIFT/Licensing

[Leo Laohoo]

---

---

Please post the complete output to the command 

sh license feature   

[jmartinez20]

Router#sh license feature
Feature name Enforcement Evaluation Subscription Enabled RightToUse
appxk9 yes yes no no yes
uck9 yes yes no no yes
securityk9 yes yes no no yes
ipbasek9 no no no yes no
FoundationSuiteK9 yes yes no no yes
AdvUCSuiteK9 yes yes no no yes
cme-srst yes yes no no yes
hseck9 yes no no no no
throughput yes yes no no yes
internal_service yes no no no no

[Leo Laohoo]

Ok, I think I have an idea what is going on.  

The factory-installed license PAK is, most likely, corrupt.  Because it is corrupt, the router rolls-back to the most basic feature set, which is "ipbase" and this is evident in the command "sh license feature" where only the "ipbase" feature set is enabled (and the rest is disabled). 

If this router is meant to have other feature set enabled, send an email to the Licensing Team and they will provide a new PAK.

[marce1000]

 - Check if  your call-home profile and or credentials are still valid by for instance issuing 

call-home send alert-group inventory

 M. 

[jmartinez20]

Router#call-home send alert-group inventory
call-home feature is disabled

[marce1000]

 - Enable call-home following the guide below and verify your issue again :

          https://www.cisco.com/c/en/us/td/docs/routers/access/800/software/feature/guide/callhome_isr.html

 M.

[jmartinez20]

I get the same:

Router#
Router#show license status
License Type Supported
permanent Non-expiring node locked license
extension Expiring node locked license
evaluation Expiring non node locked license
evalRightToUse Right to use evaluation non node locked license
rightToUse Right to use non node locked license

License Operation Supported
install Install license
clear Clear license
annotate Comment license
save Save license
revoke Revoke license
call-home License call-home

Call-home Operation Supported
show pak Display license pak via call-home
install Install license via call-home
revoke Revoke license via call-home
resend Fetch license via call-home

Device status
Device Credential type: DEVICE
Device Credential Verification: FAIL
Rehost Type: DC_OR_IC

SWIFT url status
Swift URL set to default value : https://tools.cisco.com/SWIFT/Licensing

Router#
Router#call-home send alert-group inventory
No profiles are able to send the message. It may be due to missing configurations, or because the message is not allowed in anonymous-reporting mode.

Router#

-------------------------------

Router#dir crashinfo:
^
% Invalid input detected at '^' marker.

Router#

[jmartinez20]

Router#call-home send alert-group inventory
call-home feature is disabled

[aldchave]

Hi, were you able to fix the "device credential verification" failure?

we are having similar issues....Thanks, Aldo

[jmartinez20]

No, not yet, unfortunately.