Receiving CERTIFICATE_INSTALL_REQUESTED

[Jacob Jennings]

When trying to provision a 3650 into plug and play, I am receiving the following error: Failed health check since device is stuck in non-terminal state CERTIFICATE_INSTALL_REQUESTED for more than threshold time: 0 hours, 16 minutes, 0 seconds.

This occurs even after doing a switch reset.

configure terminal

crypto key zeroize

yes

!

end

test crypto pki trustpool reset

delete nvram:*.cer

delete stby-nvram:*.cer

write memory

write erase

delete flash:vlan.dat

erase nvram:

Reload

Has anyone seen this issue?

[Hilda Arteaga]

Hi jjenn050z

On the first sight, it seems that this is an issue directly related to APIC-EM. But more details are needed in order to find out what´s happening.

We also find out as well that this may be related to a bug(s), please have a look here: http://cdetsweb-prd.cisco.com/apps/dumpcr?identifier=CSCur24578&parentprogram=QDDTS

To find further information or to solve technical issues you can also review the Cisco support forums

I hope this helps

[David Nolasco]

Hi Jacob,

Is this device contacting APIC-EM via HTTP/HTTPS?

You can take a packet capture to determine what's going on when getting the error message.

Also confirm that this switch does not have any residual configuration that might affect the behavior by following the next steps:

conf t

crypto key zero

no crypto pki cert pool

del /for /recur nvram:*.cer

wri mem

wri era

reload