Hi,
we had a vwlc pair in version Large 8.5.120.0. They are in different sites and vlans, and both vwlc's are in the same vlan as local ap's. They are in the same mobility group and we are running a flexconnect configuration. One vwlc in running on vmware and the other on kvm. We have about 570 ap's.
Then we purchased C9100-series ap's and had to upgrade software to 8.10.130.0. The vwlc running on vmware upgraded ok and ap's joined like they should. The other vwlc upgraded too but no ap's joined. After all testing we had 3 ap's joined and that took a whole week.
When booting this vwlc the log read
*fp_main_task: Apr 19 08:35:23.474: %OSAPI-3-FILE_OPEN_FAILED: Failed to open the file : /certs/cscoRsaSudi99BaRootCaCert.crt.(erno 2)
-Traceback: 0x987c5b0fd7 0x987be6cbff 0x987be6d453 0x987be5218f 0x987be75ef7 0x987c5dc293 0x987b0f10bb 0x987c5c5be7 0x7fbc3ade9dff 0x7fbc3a20698d
*fp_main_task: Apr 19 08:35:23.474: %OSAPI-3-FILE_OPEN_FAILED: Failed to open the file : /certs/cscoRsaSudi99BaRootCaCert.crt.(erno 2)
-Traceback: 0x987c5b0fd7 0x987be6ca4e 0x987be6d453 0x987be5218f 0x987be75ef7 0x987c5dc293 0x987b0f10bb 0x987c5c5be7 0x7fbc3ade9dff 0x7fbc3a20698d
*fp_main_task: Apr 19 08:35:23.474: %OSAPI-3-FILE_OPEN_FAILED: Failed to open the file : /certs/cscoRsaSudi99Cmca3CaCert.crt.(erno 2)
-Traceback: 0x987c5b0fd7 0x987be6cbff 0x987be6d453 0x987be52176 0x987be75ef7 0x987c5dc293 0x987b0f10bb 0x987c5c5be7 0x7fbc3ade9dff 0x7fbc3a20698d
*fp_main_task: Apr 19 08:35:23.474: %OSAPI-3-FILE_OPEN_FAILED: Failed to open the file : /certs/cscoRsaSudi99Cmca3CaCert.crt.(erno 2)
-Traceback: 0x987c5b0fd7 0x987be6ca4e 0x987be6d453 0x987be52176 0x987be75ef7 0x987c5dc293 0x987b0f10bb 0x987c5c5be7 0x7fbc3ade9dff 0x7fbc3a20698d
*fp_main_task: Apr 19 08:35:23.473: %OSAPI-3-FILE_OPEN_FAILED: Failed to open the file : /certs/cscoRsaSudi99RootCaCert.crt.(erno 2)
-Traceback: 0x987c5b0fd7 0x987be6cbff 0x987be6d453 0x987be52162 0x987be75ef7 0x987c5dc293 0x987b0f10bb 0x987c5c5be7 0x7fbc3ade9dff 0x7fbc3a20698d
*fp_main_task: Apr 19 08:35:23.473: %OSAPI-3-FILE_OPEN_FAILED: Failed to open the file : /certs/cscoRsaSudi99RootCaCert.crt.(erno 2)
-Traceback: 0x987c5b0fd7 0x987be6ca4e 0x987be6d453 0x987be52162 0x987be75ef7 0x987c5dc293 0x987b0f10bb 0x987c5c5be7 0x7fbc3ade9dff 0x7fbc3a20698d
*fp_main_task: Apr 19 08:35:23.473: %OSAPI-3-FILE_OPEN_FAILED: Failed to open the file : /certs/cscoRsaSudi99HaCaCert.crt.(erno 2)
-Traceback: 0x987c5b0fd7 0x987be6cbff 0x987be6d453 0x987be5214e 0x987be75ef7 0x987c5dc293 0x987b0f10bb 0x987c5c5be7 0x7fbc3ade9dff 0x7fbc3a20698d
*fp_main_task: Apr 19 08:35:23.473: %OSAPI-3-FILE_OPEN_FAILED: Failed to open the file : /certs/cscoRsaSudi99HaCaCert.crt.(erno 2)
-Traceback: 0x987c5b0fd7 0x987be6ca4e 0x987be6d453 0x987be5214e 0x987be75ef7 0x987c5dc293 0x987b0f10bb 0x987c5c5be7 0x7fbc3ade9dff 0x7fbc3a20698d
So we made a clean install and restored configuration from before the upgrade era, the same result.
So we made a clean install again. Nothing extra in logs about SUDI when rebooting. So we made the configuration again, took a couple of hours. Then we rebooted the vwlc and the same errors appeared again in the log.
If we reboot the vmware vwlc then the ap's from that site move swiftly to the kvm vwlc but not the local ap's. When the vmware vwlc is up and running all ap's join it.
No, we don't have a suitable vmware platform for vwlc on the other site. Yes we have some kind of support contract but I think that's working as well as that vwlc.
What deletes those certificate files and how to get rid of that?
