Symptom

During rollover to new CA certificate , the router crashes with Process = Crypto CA 491961: Apr 4 21:29:28.396: %PKI-1-CERT_EXPIRY_ALERT: CA Certificate belonging to trustpoint ******** will expire in 0 Days 0 hours 0 mins 0 secs. Issuer-name cn= ****************** Subject-name cn= ***************** Serial-number ***** Auto-Renewal: Shadow Certificate Obtained 491962: Apr 4 21:29:28.396: %RF_ISSU-3-INVALID_SESSION: RF ISSU client on domain (0) does not have a valid registered session. 491963: Apr 4 21:29:28.506: %PKI-6-AUTOSAVE: Running configuration saved to NVRAM 491964: Apr 4 21:29:29.791: %PKI-6-CS_ROLLOVER_SUCCESS: The rollover CA certificate is now active. 491965: Apr 4 21:29:29.791: %PKI-6-AUTOSAVE: Running configuration saved to NVRAM Exception to IOS Thread: Frame pointer 0x7FC446515A40, PC = 0x7FC4B0988BF4 UNIX-EXT-SIGNAL: Segmentation fault(11), Process = Crypto CA -Traceback= 1#e7b171113d9d8fef543d3319f9a4e292 :7FC4A6627000+A361BF4 :7FC4A6627000+A311D51 :7FC4A6627000+A3119CA :7FC4A6627000+A32D945

Conditions

roll over certificate enabled in running config

Workaround

Not known at this point

Further Problem Description