General

Internal product enhancement request.

Symptom

We have seen scenarios where the SSL sftunnel certificate can be invalid. Most likely it was generated when the date/year was invalid on the FTD. While this may not be a product error, it indirectly can lead to issues during re-registration or issues in relation to FMC-FTD sftunnel sync. This enhancement request is raised to provide a UI health alert for invalid sftunnel certificate, so that the user is aware, and an UI option to regenerate the certificate when this occurs.

Conditions

Workaround

Contact TAC for a workaround

Further Problem Description

This problem may occur after the FTD has been rebooted, following an upgrade or for other reasons.