Hi we have an onprem cssm server, already have a dozen devices successfully connected but we cannot get our 9.2 MDS 9k added.
tried all 3 method, callhome, smart and cslu, I read that only cslu is supported so sticking with that, the config is:
license smart transport cslu
license smart url cslu https://cssm/cslu/v1/pi/accoutn name (this url was taken from the cssm server)
license smart trust idtoken <3D%0A snip> all force
license smart sync all
a connection on 443 is established and ends with a reset, one of the packets from the cssm towards the switch says "expired certificate" what's interesting is the cert on cssm is not expired, and the cssm is not actually sending the cert , tried a few times with capture running and we always get client hello server hello but no cert and always ends with expired cert (I guess that is a generic message.)
There is no ignore revocation command available on this platform. I have also tried importing the cssm cert as a trustpoint but that has not helped either.
Any ideas? at this stage I was even trying to do a manual offline registration, btu I couldn't see where in the onprem cssm to actually upload the smartrequest file
