Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

MARS updates failing due to certificate error (FYI)

All our MARS devices started failing IPS signature dynamic updates today due to a certificate error.  I assume this has been updated using a root which isn't in the MARS.  I've opened a TAC case to confirm the change was intentional.  Assuming it is, all MARS devices in the field will need manual attention before they continue updating.  I will provide an update later today.


Download Failed: CS-MARS could not download IPS Signature file at Mar 06, 2013 01:15:51 PM GMT+00:00

When I click "Update now" I'm asked to accept the following certificate:

Do you want to accept following certificate for device at IpAddress <the IP varies by device>

Subject: CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE

Issuer: CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE

Valid From: Fri May 12 18:46:00 GMT+00:00 2000

Valid To: Mon May 12 23:59:00 GMT+00:00 2025

Public Key Algorithm: RSA

Signing Algorithm: SHA1withRSA