Krypto The Asa Hardware Accelerator Encountered An Error
Instagram YouTube Facebook Twitter Google + LinkedIn DirectoryNetwork InfrastructureWAN, Routing and Switching LAN, Switching and Routing Network Management Remote Access Optical Networking Getting Started with LANs IPv6 Integration and Transition EEM Scripting Other Subjects SecurityVPN Security Management Firewalling Intrusion Prevention Systems/IDS AAA, Identity and NAC Physical Security MARS Email Security Web Security Other Subjects Service ProvidersMetro MPLS Voice Over IP XR OS and Platforms Video Other Subjects Collaboration, Voice and VideoIP Telephony Video Over IP Jabber Clients Unified Communications Applications TelePresence Digital Media System Contact Center Conferencing UC Migrations Other Subjects Wireless - MobilitySecurity and Network Management Wireless IP Voice and Video Getting Started with Wireless WLCCA Other Subjects ServicesCisco ServiceGrid Connected Analytics Smart Call Home Smart Net Total Care Operations Exchange Mobile ApplicationsCisco Proximity Cisco Technical Support Online Tools and ResourcesCisco Bug Discussions Technical Documentation Ideas Cisco CLI Analyzer Support Community Help Data CenterApplication Centric Infrastructure Application Networking Intelligent Automation Server Networking Storage Networking Unified Computing Wide Area Application Services (WAAS) Other Subjects Small BusinessNetwork Storage Routers Security Surveillance Switches Voice and Conferencing Wireless Solutions and ArchitecturesBorderless Networks Collaboration Cisco User GroupsSeattle Cisco User Group (SEACUG) Silicon Valley Cisco User Group (SVCUG) Southern California Cisco User Group (SCCUG) Cisco Certifications Cisco.com Idea Center Cisco Cafe Expert CornerTop Contributors Leaderboards Cisco Live! Events Events Community CornerAwards & Recognition Behind the Scenes Feedback Forum Cisco Certifications Cisco Press Café Cisco On Demand Support & Downloads Community Resources Security Alerts Security Alerts News News Video Cisco Support YouTube Cisco YouTube Blogs Technical Documentation Cisco Products Products Services Services Solutions Solutions Global Support Numbers Cisco Support Community Directory Ne
Cisco Bug: CSCsl66538 - ASA "hardware accelerator encountered an error (Invalid PKCS Type)" Last Modified Mar 10, 2016 Product Cisco ASA 5500-X Series Firewalls Known Affected Releases 8.0(3) Description (partial) Symptom: After migration of SSL Certificate from 3000 Concentrator to ASA, can't import the SSL certificate into the ASA. When try to connect to the ASA via the SSL VPN, it fails with error message below: "CRYPTO: The ASA hardware accelerator encountered an error (Invalid PKCS Type, Pad, https://supportforums.cisco.com/discussion/9967141/asa-hardware-acceleration-error or Length, code= 0x1B) while executing the command SSL RSA Server Fin..." Conditions: Migration of SSL Certificate from 3000 Concentrator to ASA using the following steps, and try to connect to the ASA using the SSL VPN: Export the certificate from the 3000: Administration | Certificate Management Click on the Export on the SSL certificate for the public https://quickview.cloudapps.cisco.com/quickview/bug/CSCsl66538 interface. You will have to put a password for that. Save that as a file. 1) Open the exported file from the 3000 usign notepad. 2) Open 3 notepad sessions for 3 different files that you will create. 3) copy and the paste the first text string starting with -----BEGIN ENCRYPTED PRIVATE KEY----- all the way till -----END ENCRYPTED PRIVATE KEY-----. The -----BEGIN ENCRYPTED PRIVATE KEY----- and the ....END.... should be included in the file !! 4) Save this file as certpriv.txt 5) Copy and past the 2nd text string starting with -----BEGIN CERTIFICATE----- and ending with -----END CERTIFICATE----- (including both BEGIN and END). 6) Save this file ans certpublic.txt 7) Repeate steps 5 - 6 for the 3rd text string starting with -----BEGIN CERTIFICATE----- and ending with -----END CERTIFICATE----- (including both BEGIN and END). 8) Save this as certchain.txt 9)Run the following openssl command to combine the 3 files into a PKCS12 format. openssl pkcs12 -in certpublic.txt -inkey certpriv.txt -nodes -passin pass:CiscoSSL -passout pass:CiscoSSL -export -out cert.p12 -cert certchain.txt
Cisco Bug: CSCue67446 - The ASA hardware accelerator encountered an error (Bad checksum) Last Modified Jul 28, 2016 Product Cisco ASA 5500-X https://quickview.cloudapps.cisco.com/quickview/bug/CSCue67446 Series Firewalls Known Affected Releases 9.0(2.6) 9.1(1.2) Description (partial) Symptom: The ASA crypto hardware crashes due to unknown reasons, and following log message is generated: Feb 18 2013 00:20:03 https://quickview.cloudapps.cisco.com/quickview/bug/CSCuu36639 GSPASA01 : %ASA-4-402124: CRYPTO: The ASA hardware accelerator encountered an error (HWErrAddr= 0xB1278440, Core= 0, HwErrCode= 29, IstatReg= 0x40008, PciErrReg= 0x0, CoreErrStat= 0xFF, CoreErrAddr= 0x2DBD5300, Doorbell Size[0]= 2048, DoorBell krypto the Outstanding[0]= 0, Doorbell Size[1]= 0, DoorBell Outstanding[1]= 0, SWReset= 72) The IPsec clients continue to function properly, however the AnyConnect client stop passing traffic. The crash causes the DTLS tunnels to fail however the SSL tunnels on the ASA stay up. The clients still have the tunnel up, but they stop receiving traffic from ASA. the problem is seen krypto the asa with both Windows and MAC OS X clients. The DTLS issue is tracked with another bug id. Conditions: AnyConnect and IPSec clients connecting to an ASA 5585-X running 9.1.1.2. View Bug Details in Bug Search Tool Why Is Login Required? Bug details contain sensitive information and therefore require a Cisco.com account to be viewed. Bug Details Include Full Description (including symptoms, conditions and workarounds) Status Severity Known Fixed Releases Related Community Discussions Number of Related Support Cases Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract. Learn More About Cisco Service Contracts Information For Small Business Midsize Business Service Provider Executives Industries Automotive Consumer Packaged Goods Education Energy Financial Services Government Healthcare Hospitality Life Sciences Manufacturing Materials and Mining Public Sector Retail Smart+Connected Communities Sports and Entertainment Transportation Workspace Transformation Marketplace Contacts Contact Cisco Meet our Partners Find a Reseller News & Alerts Newsroom Blogs Field Notices Security Advisories Technology Trends Cloud Internet of Things (IoT) Softw
Cisco Bug: CSCuu36639 - ASA 5506X: ESP Packet drop due to crypto accelerator ring timeout Last Modified Oct 13, 2016 Product Cisco ASA 5500-X Series Firewalls Known Affected Releases 9.3(2.2) 9.3(3) 9.4(1) Description (partial) Symptom: Intermittently ESP packets are dropped on the ASA due to Crypto Accelerator issues. Crypto Hardware accelerator on ASA crashes with the message %ASA-4-402125: CRYPTO: The ASA Crypto hardware accelerator IPsec ring timed out There is traffic loss over the tunnel when the crash happens and the below message is also seen. %ASA-4-402123: CRYPTO: The ASA hardware accelerator encountered an error (Unknown Error, code= 0x7F) while executing the command Process IPSec Inbound Packet (0x30) Conditions: ASA 5506-X acting as IKEv1 or IKEv2 IPSec Termination point such as L2L VPN end-point. View Bug Details in Bug Search Tool Why Is Login Required? Bug details contain sensitive information and therefore require a Cisco.com account to be viewed. Bug Details Include Full Description (including symptoms, conditions and workarounds) Status Severity Known Fixed Releases Related Community Discussions Number of Related Support Cases Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract. Learn More About Cisco Service Contracts Information For Small Business Midsize Business Service Provider Executives Industries Automotive Consumer Packaged Goods Education Energy Financial Services Government Healthcare Hospitality Life Sciences Manufacturing Materials and Mining Public Sector Retail Smart+Connected Communities Sports and Entertainment Transportation Workspace Transformation Marketplace Contacts Contact Cisco Meet our Partners Find a Reseller News & Alerts Newsroom Blogs Field Notices Security Advisories Technology Trends Cloud Internet of Things (IoT) Software Defined Networking (SDN) Support Downloads Documentation Communities DevNet Learning Network Support Community Video Portal Certifications Events Industries Inside Cisco Products Service Provider Services Technology Trends TechWiseTV About Cisco Investor Relations Corporate Social Responsibility Environmental Sustainability Trust and Transparency Center The Next Wave of The Internet Our People Careers Search Jobs Life at Cisco Programs Cisco Designated VIP Program Cisco Powered Financing Options Contacts Feedback Help Site Map Terms & Conditions PrivacyPrivacy Statement CookiesCookie Policy Trademarks