BugZero | Cisco BugID CSCwq32085 - FP3100/4200 rebooting after generating crypto_arch...

Loading...

Operational Defect Database

A free repository of operational (non-security) bugs centralized through custom integrations with leading IT vendors.

Product

Enterprise platform
Bug Scrub Advisor
Operational Risk Scoring
Vendor Integrations

Company

Plans
Value Guide
About
Contact us
Legal

Resources

Blog
ServiceNow App
Trust Center
Risk Management
NIST
DORA

Operational Defect Database

A free repository of operational (non-security) bugs centralized through custom integrations with leading IT vendors.

Product

Enterprise platform
Bug Scrub Advisor
Operational Risk Scoring
Vendor Integrations

Company

Plans
Value Guide
About
Contact us
Legal

Resources

Blog
ServiceNow App
Trust Center
Risk Management
NIST
DORA

©2025 BugZero. All Rights Reserved.

Privacy Policy Terms of Service

BugZero | Cisco BugID CSCwq32085 - FP3100/4200 rebooting after generating crypto_arch...

ODD
Cisco
CSCwq32085

Cisco - Defect ID: CSCwq32085

FP3100/4200 rebooting after generating crypto_archive with error on console "KC ILK issue detected"

ODD
Cisco
CSCwq32085

Cisco - Defect ID: CSCwq32085

FP3100/4200 rebooting after generating crypto_archive with error on console "KC ILK issue detected"

Last updated on January 17th, 2026

BugZero Risk Score
8.0 High

Overall: 8.0

Severity: 8.2

Lifecycle: 9.1

Popularity: 6.9

What is the BugZero Risk Score?

Cisco Integration

Learn more about where this data comes from

Cisco Integration

Bug Scrub Advisor

Streamline upgrades with automated vendor bug scrubs

Bug Scrub Advisor

BugZero Enterprise

Wish you caught this bug sooner? Get proactive today.

BugZero Enterprise

Bug Details

Views: 1

Description

Symptom

ASA/FTD reboot without generating any core/crashinfo. Crypto-Archive generated Console prints the error message, "KC ILK issue detected" See "Logs" enclosure for additional log error messages

Conditions

ASA/FTD This was initially reported on 7.6.1. Can affect both units in HA (when traffic is failed over) Ikev2 tunnels configured on the device (may be affected by other DTLS/Anyconnect VPN as well). DTLS/IPSEC Flow offload enabled 3100/4200 only

Workaround

Disable DTLS/IPSEC Flow offload (will require reboot)

Further Problem Description

Most sightings have multiple occurrences within short timeframes (sometimes hours, sometimes days).

Change history

2026-01-17 Added: 7.4.0, 7.4.1, 7.4.1.1, 7.4.2, 7.4.2.1, 7.4.2.2, 7.4.2.3, 7.4.2.4, 7.6.0, 7.6.1, 7.6.2, 7.6.2.1, 7.7.0, 7.7.10, 7.7.10.1, 9.20.1, 9.20.1.5, 9.20.2, 9.20.2.10, 9.20.2.21, 9.20.2.22, 9.20.3, 9.20.3.10, 9.20.3.13, 9.20.3.16, 9.20.3.20, 9.20.3.4, 9.20.3.7, 9.20.3.9, 9.20.4, 9.20.4.10, 9.20.4.14, 9.20.4.19, 9.20.4.7, 9.22.1.1, 9.22.1.2, 9.22.1.3, 9.22.1.6, 9.22.2, 9.22.2.13, 9.22.2.4, 9.22.2.9, 9.23.1, 9.23.1.13, 9.23.1.3, 9.23.1.7

Links

Original Vendor Announcement

Relevant Products

Click on a version to see all relevant bugs

Affected versions:7.4.0, 7.4.1, 7.4.1.1, 7.4.2, 7.4.2.1, 7.4.2.2, 7.4.2.3, 7.4.2.4, 7.6.0, 7.6.1, 7.6.2, 7.6.2.1, 7.7.0, 7.7.10, 7.7.10.1, 9.20.1, 9.20.1.5, 9.20.2, 9.20.2.10, 9.20.2.21, 9.20.2.22, 9.20.3, 9.20.3.10, 9.20.3.13, 9.20.3.16, 9.20.3.20, 9.20.3.4, 9.20.3.7, 9.20.3.9, 9.20.4, 9.20.4.10, 9.20.4.14, 9.20.4.19, 9.20.4.7, 9.22.1.1, 9.22.1.2, 9.22.1.3, 9.22.1.6, 9.22.2, 9.22.2.13, 9.22.2.4, 9.22.2.9, 9.23.1, 9.23.1.13, 9.23.1.3, 9.23.1.7

Fixed versions: 9.22.2.14, 9.22.2.20, 9.23.1.19, 9.23.1.22, 9.23.1.26, 9.24.1

Relevant Products

Click on a version to see all relevant bugs

Affected versions:7.4.0, 7.4.1, 7.4.1.1, 7.4.2, 7.4.2.1, 7.4.2.2, 7.4.2.3, 7.4.2.4, 7.6.0, 7.6.1, 7.6.2, 7.6.2.1, 7.7.0, 7.7.10, 7.7.10.1, 9.20.1, 9.20.1.5, 9.20.2, 9.20.2.10, 9.20.2.21, 9.20.2.22, 9.20.3, 9.20.3.10, 9.20.3.13, 9.20.3.16, 9.20.3.20, 9.20.3.4, 9.20.3.7, 9.20.3.9, 9.20.4, 9.20.4.10, 9.20.4.14, 9.20.4.19, 9.20.4.7, 9.22.1.1, 9.22.1.2, 9.22.1.3, 9.22.1.6, 9.22.2, 9.22.2.13, 9.22.2.4, 9.22.2.9, 9.23.1, 9.23.1.13, 9.23.1.3, 9.23.1.7

Fixed versions: 9.22.2.14, 9.22.2.20, 9.23.1.19, 9.23.1.22, 9.23.1.26, 9.24.1

Top Cisco Defects

9.5Defect ID: CSCws18413
Wireless Multicast traffic fails sometimes on changing WMI interface or IP
9.5Defect ID: CSCwq81750
WMI IP is null (0.0.0.0) in the CAPWAP packet while forwarding the multicast traffic
9.4Defect ID: CSCwr21007
Upgrade/downgrade between NXOS 10.4(6) and above <--> 10.5(1), 10.5(2), or 10.5(3) fails or corrupts config
8.0Defect ID: CSCwq32085
FP3100/4200 rebooting after generating crypto_archive with error on console "KC ILK issue detected"
8.0Defect ID: CSCwm47438
Cisco NX-OS Software Image Verification Bypass Vulnerability

Ready to prevent the next vendor outage?

Cisco Integration

Learn more about where this data comes from

Cisco Integration

Bug Scrub Advisor

Streamline upgrades with automated vendor bug scrubs

Bug Scrub Advisor

BugZero Enterprise

Wish you caught this bug sooner? Get proactive today.

BugZero Enterprise