09-23-2013 05:40 PM - edited 03-01-2019 11:16 AM
I've got a new instance of UCS Central running v1.1.1a up. I'm trying to register my 3 UCS Manager domains. It seems to accept the hostname/shared secret and prompts me about accepting the certificate. But when I look at the FSM tab I see it's stuck on "Repair Cert Verify Guid".
Anyone else run into this?
Thanks,
Jonathan
09-24-2013 04:48 AM
Hello Jonathan,
A few questions
Are you sure the shared-secret matches between Central and UCSM ?
Are you using self-signed certs or third party signed certs on UCSM ?
Are those certs still valid ?
Were these UCSM previously registered with different Central device ?
Padma
09-24-2013 05:58 PM
Hi Padma,
Are you sure the shared-secret matches between Central and UCSM ? Yes. Just to make sure, I reset the shared secret and tried to Register with UCS Central again, but it made no difference.
Are you using self-signed certs or third party signed certs on UCSM ? I am using the self-signed cert that UCS Central issues.
Are those certs still valid ? I think the self-signed cert is okay, I can login to the UCS Central webpage.
Were these UCSM previously registered with different Central device ? No. However one of the domains was successfully registered with this UCS Central server and then unregistered. Then I made a number of changes to the UCSM including updating to Infra bundle 2.1.2a. I don’t think updating the UCSM infrastructure bundle would have this effect, but I wonder if I need to reset the UCS Central system somehow.
Thank you for your assistance.
09-26-2013 05:02 AM
Hello,
I have same exact issue, I am not sure, it is UCSM side or UCS Central side? Please post soultion , if you have found resolution.
Thanks
11-17-2014 07:23 PM
hi I am having the same exact issue. but when I go to my ucs central prompt
connect local-mgmt
re-generate certificate
exit
I do not see a re-generate command
12-16-2014 07:20 AM
try the instructions from here:
https://supportforums.cisco.com/discussion/11884091/stuck-repair-cert-verify-ucs-central-integration#comment-10046291
09-26-2013 01:27 PM
I have fixed this isseu by re generating new certificate on UCS Central. Below are commands used
connect local-mgmt
re-generate certificate
exit
commit-buffer
It will droup UCS Central GUI interface and should come up in quickly. Try registering UCS doamin.
Please post if above solution works.
Thanks
Hetal Soni
09-28-2013 04:40 AM
Hello,
Yes, expired UCSM cert could be one of the possible cause.
Other causes could be
1. Shared secret mismatch
2. UCS Central is not reachable
3. UCS Central GUID is different from the already registered UCS Central's GUID
4. Time is not in sync between UCSM and UCS Central
If you still have the issue, please provide output of following commands
scope system
scope control-ep policy
show fsm status
In addition, there will be more info in pa_setup.log file in UCSM techsupport bundle.
HTH
Padma
11-13-2014 08:01 AM
I have this same issue. I suspect my problem is the UCS Central GUID, because at first I registered this domain to a different UCS Central instance.
How can I clear the UCS Central GUID on UCS Manager?
Regards,
12-16-2014 07:16 AM
Could you resolve your problem and if yes, how?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide