Viewing Trustpoint on Converted 1131 Crashes AP

[Scott Pickles]

I converted an 1131 to LWAPP a while back and I'm using it in my lab today.  The controller doesn't accept it since I don't have the SSC hash.  I thought perhaps the command 'show crypto pki <certificate>' would show me the hash of the certificate.  The trouble is that when I run that command, the AP hangs immediately, is unresponsive for 30 - 60 seconds, dumps a crash log, and then reboots.  Any thoughts?

Regards,
Scott

[wackerk24 · Accepted solution]

Hey Scott, you need to issue debug pm pki enable to get the hash.

[Scott Pickles]

Thanks Kyle!

[Scott Pickles]

Upgraded to the latest CAPWAP release and all is well...

[Scott Pickles]

I'm curious as to why the hash shown in the debug output differs from that of the output of the command I ran locally on the AP?  It shows 'Fingerprint SHA1' and that's what needs to be entered into the AP policy.