9800 WLC SMart Licensing 17.3.4

[royce.varughese.1984]

Hi All,

I am trying to register new WLC running 17.3.4 to our On prem CSSM. 

We have applied smart config required. Currently we have it set tp cslu method to see if that helps. It shows connection to CSSM restored but gets below error

Mar 8 07:33:18.498 UTC: %SMART_LIC-3-COMM_FAILED: Communications failure with the Cisco Smart Software Manager (CSSM) : Received empty response from server

Cant find a reason why WLC is not registering/trust with CSSM

[royce.varughese.1984]

Mar 8 08:09:30.891 UTC: %SMART_LIC-3-COMM_FAILED: Communications failure with the Cisco Smart License Utility (CSLU) : HTTP Server Error 404: Not Found

[balaji.bandi]

Do you have any FW between Controller and CSSM on-prem ?

check guide :

https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-3/config-guide/b_wl_17_3_cg/m_cisco_smart_licensing.html

[royce.varughese.1984]

Doesnt look like a firewall in path. This is in our staging room and dont expect a firewall block

wlc01#telnet ssm 443 /source-interface vl501
Trying ssm (10.x.x.y 443)... Open

Below messages keep coming

Mar 8 08:19:30.956 UTC: %SMART_LIC-3-COMM_FAILED: Communications failure with the Cisco Smart License Utility (CSLU) : HTTP Server Error 404: Not Found
Mar 8 08:19:38.655 UTC: %SMART_LIC-5-COMM_RESTORED: Communications with Cisco Smart License Utility (CSLU) restored

[Leo Laohoo]

---

@royce.varughese.1984 wrote:

Mar 8 07:33:18.498 UTC: %SMART_LIC-3-COMM_FAILED: Communications failure with the Cisco Smart Software Manager (CSSM) : Received empty response from server

---

Hmmmm ... That's odd. 
Please post the complete output to the command "sh crypto pki trustpool | include cn=".  
I only want to see the first two lines of the output.

[royce.varughese.1984]

wlc# sh crypto pki trustpool | include cn=
cn=VeriSign Class 3 Public Primary Certification Authority - G5
cn=VeriSign Class 3 Public Primary Certification Authority - G5

[royce.varughese.1984]

Can someone share what process to be followed when we have on-prem SSM(Satellite) and 17.3.4 code running on WLC. How is licensing completed?

Do we force to smart or CSLU? 

We dont have CSLU running but have another site which runs fine on CSLU method

[Leo Laohoo]

What version is the CSSM running on?

Because the WLC is on 17.3.4, there should not be any more configuration done with CSL:  Smart License Using Policy

And the WLC should not be affected with FN - 72323 - Cisco IOS XE Software: QuoVadis Root CA 2 Decommission Might Affect Smart Licensing, Smart Call Home, and Other Functionality.

[royce.varughese.1984]

8-202201 CSSM

[Leo Laohoo]

I wonder if this is CSCwa96336.

[royce.varughese.1984]

Unable to search the bug details

[Arshad Safrulla]

Can you post your call home configuration

show run | s call-home

show run | s http

You can also consider using http instead of using https. Below is a sample I use.

conf t

call-home

no http secure server-identity-check

profile CiscoTAC-1

no active

profile XXX-Smart-Licensing

reporting smart-licensing-data

destination transport-method http

destination address http http://x.x.x.x/Transportgateway/services/DeviceRequestHandler

destination preferred-msg-format xml

active

exit

ip http client source-interface Vlan999 (Management VLAN)

crypto pki trustpoint SLA-TrustPoint

revocation-check none

end

!