Field Notice: FN74224 - TSDNA: Crosswork Network Controller Releases 4.1.0 and 5.0.0 Internal Certificate Expiration Two Years From Installation - Software Upgrade Recommended

Available Languages

Updated:February 3, 2025
Document ID:FN74224

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

High
Impact Rating:
High
First Published:
2025-Feb-03
Last Published:
2025-Feb-03
Revision:
1.0
Cisco Bug IDs:

Notice

THIS FIELD NOTICE IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTY OF MERCHANTABILITY. YOUR USE OF THE INFORMATION ON THE FIELD NOTICE OR MATERIALS LINKED FROM THE FIELD NOTICE IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS FIELD NOTICE AT ANY TIME.

Products Affected


Affected Software Product Affected Release Affected Release Number Comments
Crosswork Network Controller 4 4.1.0  
Crosswork Network Controller 5 5.0.0  

Defect Information


Defect IDHeadline
CSCwn51183CNC internal tls certs expire after two years of installation

Problem Description


The internal certificates associated with Cisco Crosswork Network Controller (CNC) 4.1.0 and 5.0.0 releases and maintenance releases will expire two years from installation.


Background


As per SEC-509-CA-FR4 specifications, internal certificates have expiration times.


Problem Symptom


Customers with Cisco CNC releases 4.1.0 and 5.0.0 who have not upgraded will see their systems become unavailable when the certificate expires two years after installation.


Workaround/Solution


Workaround

Note: To avoid a complete re-deployment of a cluster, at-risk customers can upgrade to the current release. Failure to take action before certificate expiration requires building a new cluster and importing their data (essentially a complex brownfield install) or working with Cisco through a paid engagement to upgrade and resolve the issue.

There are two options:

  1. Upgrade to a fully supported release (6.0 or later) before the expiration of the certificate (recommended).
  2. Purchase a custom-designed certificate extension along with assistance to implement, test, and maintain (additional cost applies).

How to Identify Affected Products


To check the current software release and certificate expiration date, complete the following steps:

  1. On the top right of the page, click the ? (about) icon. A menu appears.
  2. Click on the About Crosswork icon, as shown in the following image.

     3. The current release will display, as shown in the following image.

Note: A system that is running Cisco CNC  Release 4.1.0 will show an image and infrastructure version of 4.4.0, as shown in the following image. A system that is running Cisco CNC  Release 5.0.0 will show an image and Infrastructure version of v5.0.0.

 

 

Check the Certificate Expiration Date

If the installation date is unknown and there are no plans to upgrade immediately, Cisco CX can provide a script to display this information. Complete the following steps:

  1. Open a case and ask for the expiration check script.
  2. Run the script.
  3. Share the script results with Cisco CX and they will review and arrange to have a sales team work help get the update tool.

Revision History


VersionDescriptionSectionDate
1.0Initial Release—2025-FEB-03

For More Information

For further assistance or for more information about this field notice, contact the Cisco Technical Assistance Center (TAC) using one of the following methods:

Receive Email Notification About New Field Notices

To receive email updates about Field Notices (reliability and safety issues), Security Advisories (network security issues), and end-of-life announcements for specific Cisco products, set up a profile in My Notifications.

Was this Document Helpful?

FeedbackFeedback

Contact Cisco

This Document Applies to These Products