Connectrix Cisco MDS: Failed to install trust code when the switch is connected directly to CSSM

Summary: Topology 2: Connected Directly to CSSM. In this type of connection, communication is established directly and trusted connection from a switch to CSSM. The direct connection requires network reachability to CSSM. The switch is configured with transport type as "call home." ...

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

Trust Code installed shows "<none>" and fails to update its status under "Show license status" without any error on "Show logging log." 
`show license status`
Utility: 
    Status: DISABLED

Smart Licensing using Policy:
    Status: ENABLED

Data Privacy: 
    Sending Hostname: yes 
    Callhome Hostname Privacy: DISABLED 
        Smart Licensing Hostname Privacy: DISABLED 
    Version Privacy: DISABLED 

Transport: 
    Type: Callhome
.
.
.
Trust Code installed: <none>  >> The trust code status shows none.

Cause

CSSM is not reachable, and the configured transport type is CallHome.
Use the below command to check if the URL is exactly configured as follows: https://tools.cisco.com/its/service/oddce/services/DDCEService.

 show license status

 

Switch : san002
callhome
  email-contact <Company email ID>
  streetaddress <Site address>
  distribute
  destination-profile full_text
  destination-profile full_text format XML
  destination-profile full_text message-size 100000
  destination-profile test
  destination-profile test format XML
  destination-profile test message-level 5
  destination-profile xml transport-method http
  destination-profile xml message-level 2
  .
  .
  .
  destination-profile xml http https://tools.cisco.com/its/service/oddce/services/DDCEService > this URL configuraion should be present in callhome config.
  destination-profile test alert-group system
  transport email from <Company email ID>
  transport email reply-to <Company email ID>

Resolution

Configure the URL and check the call home configuration updated with the URL. 
switch# configure terminal
switch(config)# ip domain-lookup
switch(config)# ip domain-name cisco.com
switch(config)# ip name-server 171.70.xx.xx
switch(config)# callhome
switch(config-callhome)# dest xml trans http
switch(config-callhome)# dest xml email sl-sch-test@cisco.com
switch(config-callhome)# dest xml http https://tools.cisco.com/its/service/oddce/services/DDCEService
switch(config-callhome)# enable
switch(config-callhome)# commit*
switch(config-callhome)# exit
switch(config)# feature license smart
Ensure that the CallHome distributer is enabled. If not, the commit fails.
Once the URL is configured, install the trust code using below: 
Run the command on the switch: 
switch# license smart trust idtoken id_token_value all
Id token should be copied from the CSSM portal under Inventory> General tab. 
san002# show license status
Utility:
    Status: DISABLED
Smart Licensing using Policy:
    Status: ENABLED
Data Privacy:
    Sending Hostname: yes
    Callhome Hostname Privacy: DISABLED
        Smart Licensing Hostname Privacy: DISABLED
    Version Privacy: DISABLED
Transport:
    Type: Callhome
.
.
.
Trust Code installed: Sep  2 13:10:07 2024  UTC
    Active: PID: DS-C9706, SN: FXS24XXXXXX
        Sep  2 13:10:07 2024  UTC
    Standby: PID: DS-C9706, SN: FXS24XXXXXX
        Sep  2 13:10:07 2024  UTC

Additional Information

Reference link: https://www.cisco.com/c/en/us/td/docs/dcn/mds9000/sw/9x/configuration/licensing/cisco-mds-9000-nx-os-licensing-guide-9x/m-mds900-ssl.html#Cisco_Concept.dita_4879e553-bac5-4c52-800b-d84219951758

Products

Connectrix MDS-Series Firmware
Article Properties
Article Number: 000228278
Article Type: Solution
Last Modified: 16 Sept 2024
Version:  1
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.