Business 240AC error when checking software version

[tzero1dekom]

Hi,

I have a 240AC device which is erroring when I try to check the software version.

Then error message is: Connection failed: 60. peer certificate cannot be authenticated with given CA certificate.

This worked initially, but not sure why this have changed.

Thank you in advance

[Mark Elsen]

           - Exactly which command did you try ?

 M.

[tzero1dekom]

Marce hi,

This is via the Web interface.

[Rich R]

Have you tried a different browser or an older version of the browser?

Things that could have changed over time:

- browser security settings got stricter - this is happening all the time (so viewing pages which use self-signed certs becomes more difficult)

- device cert expired

[tzero1dekom]

I tried using different browsers, but still recieved the same error message.

[Mark Elsen]

                - Could you post a screenshot ?

 M.

[Rich R]

This looks the same as https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvv54258 / https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm03931 although that is for Firepower.  The point is that the Cisco website has changed their root certificate authority and the old device firmware doesn't recognise it.  I doubt that there is an option to upload new root CAs on these devices so until there is a new version of firmware with a fix you'll have to do it manually:

https://www.cisco.com/c/en/us/support/docs/smb/wireless/CB-Wireless-Mesh/1769-tz-Frequently-Asked-Questions-for-a-Cisco-Business-Mesh-Network.html

https://www.cisco.com/c/en/us/support/docs/smb/wireless/CB-Wireless-Mesh/2063-Upgrade-software-of-CBW-access-point.html

Ideally open a TAC case to make sure they are aware of the problem on this product (they might already have a bug for it but I didn't find one) to make sure it does get fixed in the next release.