Hi bjohnson5, thanks for your response. I have 2 3750 with integrated WLCs. The Problem is, that the generated RSA Key Hash is still wrong. So if i pushed it to the Controllers, the APs where not accepted. Only if i debug (debug pm pki enable) the MAC/ RSA Key pair, removed the wrong pair from SECURITY > AP Authorization List and added the right SSC Key Hash, the APs are able to authorize against both Controllers and connect to them. Regards, Michael

Thanks Michael,

Is the key missing or is it mis-entered on the WLC? Look in the Detailed Log. Does it have the correct command (and SSC hash) being entered, and does the script complete correctly? Not much that can be done in theis case, but curious as to the state of the key on the WLC. The controllers were pre-configured to allow SSCs, correct?

Thanks bjohnson5, the Controllers are configured to accept SSC. Most of them are correct and accepted. ca 25% of the Key Hashes in the csv File are generated wrong by the Conversion Tool. The Log Files shows a successfull Conversion. MAC Adress, Certificate Type are OK, RSA Key not. Regards, Michael

Michael, do you use exactly 6 APs at once or do you pull 6 at a time from a longer config file? I factory-default the config and use the default user/pass on the APs. What rev of IOS is on the APs prior to the upgrade? I have used 12.3.7-JA/JA2/JA3 with out issue. 12.3.8 has echibited a few problems.

Hi bjohnson5, i tested 1 AP, then i did 6 at a time. I used the working Config with 12.3.7-JAx and the Ip File contains Username, PW and enable PW. What do you mean, should i open a TAC Case? Regards, Michael

If you haven't yet, try doing this with a factory-defaulted config and Cisco, Cisco,Cisco.

Hi bjohnson5, i contacted an SE and he gaves me the same Information. I?ll try it next Time the Problem occurs. Thank you very much, Michael

What selection are you using for the system time? Verify that the time is synced between both the controllers and the machine you are runing the upgrade tool from. I have used the V2.01 tool and did not have any major problems until my PC became out of sync with the time that was running on the controller. If you are using NTP on the controller and one of the default time servers on your PC they may not be on the same time, as Windows only updates every 7 days unless you change it in the registry. Just a thought.

Hi Tony, thanks for your idea. All Devices are in Sync with the central Timesource, the Converting PC, WLC and AP. In the conversion tool i decided to use the controller time. Regards, Michael