cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2495
Views
0
Helpful
14
Replies

ISR4321 K9

jmartinez20
Level 1
Level 1

Hello Cisco Community,

 

I get the following error when I do show license status.   Is this normal? perhaps a bug or defective unit?  Thanks for your help in advance!

 

Device Credential Verification: FAIL

 

Router# sh license status
License Type Supported
permanent Non-expiring node locked license
extension Expiring node locked license
evaluation Expiring non node locked license
evalRightToUse Right to use evaluation non node locked license
rightToUse Right to use non node locked license

License Operation Supported
install Install license
clear Clear license
annotate Comment license
save Save license
revoke Revoke license
call-home License call-home

Call-home Operation Supported
show pak Display license pak via call-home
install Install license via call-home
revoke Revoke license via call-home
resend Fetch license via call-home

Device status
Device Credential type: DEVICE
Device Credential Verification: FAIL
Rehost Type: DC_OR_IC

14 Replies 14

Leo Laohoo
Hall of Fame
Hall of Fame
What firmware is the appliance running on?

System returned to ROM by reload
System image file is "bootflash:isr4300-universalk9.03.14.00.S.155-1.S-std.SPA.bin"

Router is running 3.14.0 .  The last digit is "0".  Which means the router potentially reloaded with a crash. 

Post the complete output to the command "dir crashinfo:". 

You might want to seriously reconsider upgrading the firmware to something more recent.

Thank you for the response, I updated IOS and still get the same error.

 bootflash:isr4300-universalk9.16.06.03.SPA.bin

 

Router uptime is 16 minutes
Uptime for this control processor is 19 minutes
System returned to ROM by Reload Command
System image file is "bootflash:isr4300-universalk9.16.06.03.SPA.bin"
Last reload reason: Reload Command

 

Router# dir
Directory of bootflash:/

11 drwx 16384 May 8 2020 00:36:03 +00:00 lost+found
64257 drwx 4096 May 27 2020 23:04:39 +00:00 .prst_sync
12 -rw- 421580388 May 8 2020 00:45:27 +00:00 isr4300-universalk9.03.14.00.S.155-1.S-std.SPA.bin
80321 drwx 4096 May 27 2020 23:02:19 +00:00 .installer
112449 drwx 4096 May 27 2020 23:04:55 +00:00 core
160641 drwx 4096 May 8 2020 00:49:17 +00:00 .rollback_timer
13 -rw- 0 May 8 2020 00:49:24 +00:00 tracelogs.098
176705 drwx 12288 May 27 2020 23:20:00 +00:00 tracelogs
14 -rw- 549962392 May 27 2020 22:46:21 +00:00 isr4300-universalk9.16.06.03.SPA.bin
15 -rw- 30 May 27 2020 23:04:39 +00:00 throughput_monitor_params

3232477184 bytes total (2095382528 bytes free)
Router#
Router#
Router#dir cras
Router#dir crashinfo
%Error opening bootflash:/crashinfo (No such file or directory)
Router#

----------------------------------------------------------

Router#show license status
License Type Supported
permanent Non-expiring node locked license
extension Expiring node locked license
evaluation Expiring non node locked license
evalRightToUse Right to use evaluation non node locked license
rightToUse Right to use non node locked license

License Operation Supported
install Install license
clear Clear license
annotate Comment license
save Save license
revoke Revoke license
call-home License call-home

Call-home Operation Supported
show pak Display license pak via call-home
install Install license via call-home
revoke Revoke license via call-home
resend Fetch license via call-home

Device status
Device Credential type: DEVICE
Device Credential Verification: FAIL
Rehost Type: DC_OR_IC

SWIFT url status
Swift URL set to default value : https://tools.cisco.com/SWIFT/Licensing

 



Please post the complete output to the command 

sh license feature   

 


Router#sh license feature
Feature name Enforcement Evaluation Subscription Enabled RightToUse
appxk9 yes yes no no yes
uck9 yes yes no no yes
securityk9 yes yes no no yes
ipbasek9 no no no yes no
FoundationSuiteK9 yes yes no no yes
AdvUCSuiteK9 yes yes no no yes
cme-srst yes yes no no yes
hseck9 yes no no no no
throughput yes yes no no yes
internal_service yes no no no no

Ok, I think I have an idea what is going on.  

The factory-installed license PAK is, most likely, corrupt.  Because it is corrupt, the router rolls-back to the most basic feature set, which is "ipbase" and this is evident in the command "sh license feature" where only the "ipbase" feature set is enabled (and the rest is disabled). 

If this router is meant to have other feature set enabled, send an email to the Licensing Team and they will provide a new PAK.

marce1000
VIP
VIP

 

 - Check if  your call-home profile and or credentials are still valid by for instance issuing 

call-home send alert-group inventory

 M. 



-- ' 'Good body every evening' ' this sentence was once spotted on a logo at the entrance of a Weight Watchers Club !

 

 

Router#call-home send alert-group inventory
call-home feature is disabled

 

 - Enable call-home following the guide below and verify your issue again :

          https://www.cisco.com/c/en/us/td/docs/routers/access/800/software/feature/guide/callhome_isr.html

 M.



-- ' 'Good body every evening' ' this sentence was once spotted on a logo at the entrance of a Weight Watchers Club !

I get the same:


Router#
Router#show license status
License Type Supported
permanent Non-expiring node locked license
extension Expiring node locked license
evaluation Expiring non node locked license
evalRightToUse Right to use evaluation non node locked license
rightToUse Right to use non node locked license

License Operation Supported
install Install license
clear Clear license
annotate Comment license
save Save license
revoke Revoke license
call-home License call-home

Call-home Operation Supported
show pak Display license pak via call-home
install Install license via call-home
revoke Revoke license via call-home
resend Fetch license via call-home

Device status
Device Credential type: DEVICE
Device Credential Verification: FAIL
Rehost Type: DC_OR_IC

SWIFT url status
Swift URL set to default value : https://tools.cisco.com/SWIFT/Licensing

Router#
Router#call-home send alert-group inventory
No profiles are able to send the message. It may be due to missing configurations, or because the message is not allowed in anonymous-reporting mode.

Router#

-------------------------------

Router#dir crashinfo:
^
% Invalid input detected at '^' marker.

Router#

Router#call-home send alert-group inventory
call-home feature is disabled

Hi, were you able to fix the "device credential verification" failure?

 

we are having similar issues....Thanks, Aldo

jmartinez20
Level 1
Level 1

No, not yet, unfortunately.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: