Symptom

Steps to reproduce the issue 1. Configure a new ISE integration using FMC 7.3.0 2. Once all the required parameter are set, click Test button (connectivity test). 3. Undefined error will be shown with no other related information.

Conditions

- FMC 7.3.0 - ISE Integration - tcpdump to check communication between FMC and ISE won't show any information (no packets are captured) - ADI.conf file is not being written with proper configuration (view output below) root@fmc:~# cat /etc/sf/ADI.conf global_settings { cipher_key_file_path /etc/sf/ADI_conf_Encryption_Key.bin; max_active_auth_retries 0; send_ra_vpn_events off; send_s2s_vpn_events 0; - Error snippet in mojo.log (view output below) [2023-07-10 11:03:24.32700] [14979] [info] handle_auth: Trying to connect to /pjb.cgi [2023-07-10 11:03:24.33852] [14979] [info] handle_auth: session param sf_action_id=******, username in session=levi.r.ingersoll.mil, _SESSION_ID=****** [2023-07-10 11:03:24.33865] [14979] [info] pjb.cgi - Started function SF::DirectoryServices::DirectoryServices::testISEConnection , user: levi.r.ingersoll.mil [2023-07-10 11:03:24.39074] [14979] [info] testing ISE connection on this device... at /usr/local/sf/lib/perl/5.32.1/SF/DirectoryServices/DirectoryServices.pm line 391. [2023-07-10 11:03:24.44884] [14979] [info] Use of inherited AUTOLOAD for non-method SF::SSL::KEK::kekDecryptEO() is deprecated. This will be fatal in Perl 5.28 of upstream (port this feature to the current version) at /usr/local/sf/lib/perl/5.32.1/SF/IdentityRealm/IdentityRealm.pm line 1172. [2023-07-10 11:03:24.46727] [14979] [info] Smartmatch is experimental at /usr/local/sf/lib/perl/5.32.1/SF/SSL/KEK.pm line 105. [2023-07-10 11:03:24.67997] [14979] [info] $VAR1 = { 'stderr' => 'writing RSA key unable to write key 22372969088256:error:0607B11C:digital envelope routines:EVP_CipherInit_ex:disabled for fips:crypto/evp/evp_enc.c:154: 22372969088256:error:06074078:digital envelope routines:EVP_PBE_CipherInit:keygen failure:crypto/evp/evp_pbe.c:130: 22372969088256:error:23077073:PKCS12 routines:PKCS12_pbe_crypt:pkcs12 algor cipherinit error:crypto/pkcs12/p12_decr.c:40: 22372969088256:error:2306C067:PKCS12 routines:PKCS12_item_i2d_encrypt:encrypt error:crypto/pkcs12/p12_decr.c:144: 22372969088256:error:23084067:PKCS12 routines:PKCS8_set0_pbe:encrypt error:crypto/pkcs12/p12_p8e.c:54: ', 'rcode' => 256, 'stdout' => undef }; [2023-07-10 11:03:24.68239] [14979] [error] pjb.cgi - Error calling 'SF::DirectoryServices::DirectoryServices::testISEConnection' , user: levi.r.ingersoll.mil [2023-07-10 11:03:24.68250] [14979] [error] pjb.cgi - Parameters used: $VAR1 = '["150.137.12.217","141.190.12.217","aca8a6f8-1b87-11ee-91fa-a6c3bb6cf22f","df4bd46e-1b86-11ee-91fa-a6c3bb6cf22f","04105af6-1784-11ee-b3e7-834e514c655e",false,true,""]'; fpreplication { mode leader; single_leader_topics active; };

Workaround

None - Investigation going on

Further Problem Description