This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos XG for VMware: Unable to register he serial number even if the FW can ping www.sophos.com

Hello everybody,

I am new in the Sophos world.

For practising I installed Sophos XG for VMware 18.5.1 on my VMware Worstation 15.1.

When I access the Sophos XG from a virtual PC using https://<ip address>:4444 the basic

setup procedure starts. I copy&paste the the serial number into the field 'I have an existing serial number'

and click <continue>. After some seconds I get the browser message: 

We can’t connect to the server at www.sophos.com.

I can ping www.sophos.com from the Sophos XG command line without problems.

What can I do to get the registration of the serial number working?

Every hint is welcome.



Thanks a lot!



This thread was automatically locked due to age.
  • Hi,

    please check the time because that is important. Does the XG have two interface active? What is between the XG and the internet?

    Ian

    XG115W - v20 GA - Home

    XG on VM 8 - v20 GA

    If a post solves your question please use the 'Verify Answer' button.

  • Hi Ian,

    the date & time of teh Sophos XG is correct ant it has two interfaces (see attached screen dumps).
    Sophos Screens.pdf

    On the router between the Sophos XG and the internet is no outgoing filter in place. Other hosts don't have any connection
    problems.

    Can I test the connection to the licensing server from the CLI menu or is there any other possibility for testing this connection?


    Thanks a lot!



    Bye

    Rene

  • Hi,

    the issue will more than likely in your router eg NAT.

    Try connecting the XG directly to the internet or change your router to bridge mode.

    Ian

    XG115W - v20 GA - Home

    XG on VM 8 - v20 GA

    If a post solves your question please use the 'Verify Answer' button.

  • Hi Ian,

    the router is a FritzBox 7590 and has no bridge mode but a single IP can be configured as 'exposed host' so this IP is unprotected completely and can be seen outside. I used this feature for the Sophos XG but anyway the registration fails. If NAT is the problem why does the ping to www.sophos.com works and how can the Sophos registration web site determine that the traffic is NATed? 

    When you want use the Sophos XG between two department LANs and it doesn't have Internet access is this impossible?


    Does the management PC that I use to access the Sophos XG by https://<IP_address>:4444 needs Internet Access to let the registration of the serial number work? I don't think so but want hear you opinion. I used Firefox on this PC - should I try another one?


    This is my first touch with Sophos ... Grinning


    Thanks a lot!




    Bye
    Rene

  • Hello Rene,

    Thank you for contacting the Sophos Community.

    Is this for a paid license or a home license?

    I would SSH into the XG and check the /log/licensing.log, it should provide some clue as to what might be happening.

    The suggestion from rfcat, about if this is the border router is that sometimes the upstream device might break the communication for SSL/TLS.

    Regards,


     
    Emmanuel (EmmoSophos)
    Technical Team Lead, Global Community Support
    Sophos Support VideosProduct Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
  • Sophos had a problem in the registration server. worked for me this morning.

  • Hi Emmanuel,

    thanks for your reply!

    I have a home license running on VMware Workstation 15.1 istalled for training

    with Sophos because I should help our Sophos customers. My employer SWS is

    a Sophos partner ...

    The registration of the serial number I got from Sophos by eMail

    failed again after re-installation of the firewall I gathered the  licensing.log of my

    registration attempts of this evening (see below).

    Looks like a licensing issue but date & time are ok.

    The router between Sophos XG and the Internet is a FritzBox 7590 and the

    IP-address of the Sophos' WAN port is configured as 'exposed host' so it

    is completely unprotected and can be seen outside.

    When I click in the GUI "How-to guides" I got also the browser message

    that the page cannot be reached even if I can ping www.sophos.com from

    the Sophos XG.

    What can be done to get this working?

    Thanks a lot!





    Bye

    Rene

    Sophos Firewall                                                                 
    ===============                                                                 
    (C) Copyright 2000-2021 Sophos Limited and others. All rights reserved.         
    Sophos is a registered trademark of Sophos Limited and Sophos Group.            
    All other product and company names mentioned are trademarks or registered      
    trademarks of their respective owners.                                          
                                                                                    
    For End User License Agreement - http://www.sophos.com/en-us/legal/sophos-end-us
    er-license-agreement.aspx                                                       
                                                                                    
    NOTE: If not explicitly approved by Sophos support, any modifications           
          done through this option will void your support.                          
                                                                                    
                                                                                    
    SF01V_SO01_SFOS 18.5.1 MR-1-Build326# more /log/licensing.log                   
    INFO      Nov 30 19:55:00 [4153292352]: --requestType = 1                       
    INFO      Nov 30 19:55:00 [4153292352]: --serial = C01001939QCXT6E              
    INFO      Nov 30 19:55:00 [4153292352]: --deviceid = 130e4e93-9a90-4daa-93d0-fcb
    6aa6cd057                                                                       
    INFO      Nov 30 19:55:00 [4153292352]: --model = SF01V                         
    INFO      Nov 30 19:55:00 [4153292352]: --vendor = SO01                         
    INFO      Nov 30 19:55:00 [4153292352]: --upgradedFrom = 0                      
    INFO      Nov 30 19:55:00 [4153292352]: --fwversion = 18.5.1.326                
    INFO      Nov 30 19:55:00 [4153292352]: --cert = /_conf/certificate/licensing/mf
    gr_vendor_SO.pem                                                                
    INFO      Nov 30 19:55:00 [4153292352]: --token = Token-Id:SO-D5C052A8          
    INFO      Nov 30 19:55:00 [4153292352]: --key = /_conf/certificate/licensing/mfg
    r_vendor_SO.key                                                                 
    INFO      Nov 30 19:55:00 [4153292352]: URL : https://eu-prod-utm.soa.sophos.com
    /api/device/1/applianceactivation                                               
    INFO      Nov 30 19:55:00 [4153292352]: request : { "serialNumber": "C01001939QC
    XT6E", "deviceId": "130e4e93-9a90-4daa-93d0-fcb6aa6cd057", "model": "SF01V", "de
    viceFirmwareVersion": "18.5.1.326", "vendorCode": "SO01" }                      
    INFO      Nov 30 19:55:00 [4153292352]: response : {"trackingId":"f627e8da-21b3-
    4466-a4eb-9e298d2e96fc","statusCode":200,"errorCode":"ITSERVICELAYER_SUCCESS","m
    essage":"Activation successful.","data":{"serialNumber":"C01001939QCXT6E","devic
    eId":"130e4e93-9a90-4daa-93d0-fcb6aa6cd057","model":"SF01V"}}                   
    INFO      Nov 30 19:55:00 [4153292352]: Activation Successfull...:)             
    ####################################################                            
    generate certificate signing request (CSR)  Tue Nov 30 19:55:02 GMT 2021        
                                                                                    
                                                                                    
    Tue Nov 30 19:55:03 GMT 2021 certificate signing request generated with status :
    : 0                                                                             
                                                                                    
                                                                                    
    ####################################################                            
    INFO      Nov 30 19:55:03 [4153325120]: --requestType = 4                       
    INFO      Nov 30 19:55:03 [4153325120]: --serial = C01001939QCXT6E              
    INFO      Nov 30 19:55:03 [4153325120]: --deviceid = 130e4e93-9a90-4daa-93d0-fcb
    6aa6cd057                                                                       
    INFO      Nov 30 19:55:03 [4153325120]: --cert = /_conf/certificate/licensing/mf
    gr_vendor_SO.pem                                                                
    INFO      Nov 30 19:55:03 [4153325120]: --key = /_conf/certificate/licensing/mfg
    r_vendor_SO.key                                                                 
    INFO      Nov 30 19:55:03 [4153325120]: URL : https://eu-prod-csr.soa.sophos.com
    /api/certificate/1/signing                                                      
    INFO      Nov 30 19:55:03 [4153325120]: certificate_signing_request() : request 
    : { "serialNumber":"C01001939QCXT6E", "deviceId":"130e4e93-9a90-4daa-93d0-fcb6aa
    6cd057", "certificateSigningRequest":"-----BEGIN CERTIFICATE REQUEST-----       
    MIIDIjCCAgoCAQAwgZcxCzAJBgNVBAYTAkdCMRQwEgYDVQQIDAtPeGZvcmRzaGly                
    ZTERMA8GA1UEBwwIQWJpbmdkb24xFDASBgNVBAoMC1NvcGhvcyBMdGQuMQwwCgYD                
    VQQLDANOU0cxGzAZBgNVBAMMElNGX0MwMTAwMTkzOVFDWFQ2RTEeMBwGCSqGSIb3                
    DQEJARYPaW5mb0Bzb3Bob3MuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB                
    CgKCAQEAqifPkxwO3dBGtxU4cMIEItAAPsSS/6Omf3x0W3F0l2MvYBCXjRnUVNKw                
    DAkHODg0B/iWk8cyS6qIlg7GSr9wiQ7WCRjwPeFZEjkMoSLCnCyDdrA/HQOUWlad                
    HKVfuugPallKp4UFAj4qmDNlKq90UcdGmP+CrS+FwCKqWAVike3q2bKkVyq+OXO0                
    Biq6CM8XAWyE70DIz1nGBjfmXr2Kv0bjVMZSBrj9NDbQsRyfmevzS2c8pGWkGWUn                
    qwhiZWuG4YoTtJVk6flB5G5xkg8R3bfJh5J/1uN09CMup8V7tRf8S6RW6SI7uLRW                
    /qwsBRWe5Xwmv8UurQM4Ewf5/IHtbwIDAQABoEUwGgYJKoZIhvcNAQkCMQ0MC1Nv                
    cGhvcyBMdGQuMCcGCSqGSIb3DQEJDjEaMBgwCQYDVR0TBAIwADALBgNVHQ8EBAMC                
    BeAwDQYJKoZIhvcNAQELBQADggEBAJoyK6M5FphR7OwSGKTuB4cSQJF2U48LCOU6                
    QJp6XQFYGGyuHTUGmNEkctdvn1T5GgMcyRi2TQnKvfpPWGXOt0DmeFEvzMmTaFY6                
    st8N6hDTHhKwSZTDCWtY9FnZuj97+bpnDsQAGegHPmFpoVAR5DehltO9puefHJ0w                
    7OjFe+kVE0KcwgaTB0cGXWOUiZ6dlVNVNYzZefrenYEgrroLAIQgvuhvzdPPRNLM                
    sJXSZCCT0d2B0Oen4JRQq8qrsLE1ie8zf+bGlLXUVs0xlT+bmU0YHg3MvBxk0Iuu                
    nMc3i6cpKeOBFrmvvQLyd24a1zkWa9pO/og+3ezcnvdIaNeEcGs=                            
    -----END CERTIFICATE REQUEST-----                                               
    "}                                                                              
    INFO      Nov 30 19:55:03 [4153325120]: certificate_signing_request() : response
     : {"errorCode":"ITSERVICELAYER_PROVIDER_REQUEST_ERROR","message":"Device must b
    e activated and registered","statusCode":400,"trackingId":"9812df4d-a903-4bea-88
    43-47d77a03d443"}                                                               
                                                                                    
    ERROR     Nov 30 19:55:03 [4153325120]: Certificate signing Failed : Device must
     be activated and registered...:(                                               
    ERROR     Nov 30 19:55:03 [4153325120]: certificate signing request() : parsing 
    failed...                                                                       
    INFO      Nov 30 20:06:20 [4154005056]: --requestType = 2                       
    INFO      Nov 30 20:06:20 [4154005056]: --lastCheckCode = 00000000-0000-0000-000
    0-000000000000                                                                  
    INFO      Nov 30 20:06:20 [4154005056]: --cert = /content/licensing/lic_csr.pem 
    INFO      Nov 30 20:06:20 [4154005056]: --token = Token-Id:C01001939QCXT6E      
    INFO      Nov 30 20:06:20 [4154005056]: --key = /content/licensing/lic_csr.key  
    INFO      Nov 30 20:06:20 [4154005056]: URL : https://eu-prod-utm.soa.sophos.com
    /api/device/2/license                                                           
    INFO      Nov 30 20:06:28 [4154005056]: response : {"errorCode":"ITSERVICELAYER_
    CLIENT_AUTHENTICATION_ERROR","message":"Authentication failed","statusCode":403,
    "trackingId":"15095ebb-31d2-4b25-807b-ed487817b88e"}                            
    ERROR     Nov 30 20:06:28 [4154005056]: license_check failed : Authentication fa
    iled                                                                            
    ERROR     Nov 30 20:06:28 [4154005056]: licensing_do_licensecheck() :parsing res
    ponse failed...                                                                 
    ####################################################                            
    generate certificate signing request (CSR)  Tue Nov 30 20:06:28 CET 2021        
                                                                                    
                                                                                    
    Tue Nov 30 20:06:30 CET 2021 certificate signing request generated with status :
    : 0                                                                             
                                                                                    
                                                                                    
    ####################################################                            
    INFO      Nov 30 20:06:30 [4153865792]: --requestType = 4                       
    INFO      Nov 30 20:06:30 [4153865792]: --serial = C01001939QCXT6E              
    INFO      Nov 30 20:06:30 [4153865792]: --deviceid = 130e4e93-9a90-4daa-93d0-fcb
    6aa6cd057                                                                       
    INFO      Nov 30 20:06:30 [4153865792]: --cert = /_conf/certificate/licensing/mf
    gr_vendor_SO.pem                                                                
    INFO      Nov 30 20:06:30 [4153865792]: --key = /_conf/certificate/licensing/mfg
    r_vendor_SO.key                                                                 
    INFO      Nov 30 20:06:30 [4153865792]: URL : https://eu-prod-csr.soa.sophos.com
    /api/certificate/1/signing                                                      
    INFO      Nov 30 20:06:30 [4153865792]: certificate_signing_request() : request 
    : { "serialNumber":"C01001939QCXT6E", "deviceId":"130e4e93-9a90-4daa-93d0-fcb6aa
    6cd057", "certificateSigningRequest":"-----BEGIN CERTIFICATE REQUEST-----       
    MIIDIjCCAgoCAQAwgZcxCzAJBgNVBAYTAkdCMRQwEgYDVQQIDAtPeGZvcmRzaGly                
    ZTERMA8GA1UEBwwIQWJpbmdkb24xFDASBgNVBAoMC1NvcGhvcyBMdGQuMQwwCgYD                
    VQQLDANOU0cxGzAZBgNVBAMMElNGX0MwMTAwMTkzOVFDWFQ2RTEeMBwGCSqGSIb3                
    DQEJARYPaW5mb0Bzb3Bob3MuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB                
    CgKCAQEAyu5eQWrzY7aq7/DdVR01KKPNSTPaZBUGdUhG6FPty7BjpDP/Alm54Ns0                
    12Jb9aWZVpXMoGgLmydowZr1AHQXxyV+7WZZ2vhMaOuQ3RMgYmcd/YkZpT5FI+F6                
    GxdiM0tyXzFqF4V7C+gHEfWjwno2bZqel6x8QxxKH/dxc5F6e208AmKMJO6/kh+S                
    QO9gDXBG9fMYmMbr0ewoi91WzYnwuFWGNv9Wxp4pOUpAoSXGG13kmTZdZiHhDPGS                
    vh5/A6mYr090315fkGs7dJBRDjETQaNFC7AL2xtqVaV8UIRzBbUpoXxC/II7sUt8                
    bqnNCv9GvIOMdRyWzYea0YOcomsiEQIDAQABoEUwGgYJKoZIhvcNAQkCMQ0MC1Nv                
    cGhvcyBMdGQuMCcGCSqGSIb3DQEJDjEaMBgwCQYDVR0TBAIwADALBgNVHQ8EBAMC                
    BeAwDQYJKoZIhvcNAQELBQADggEBAAT3crSAl3pWgWTIPaxSWn7N3pz5x2B3H1YJ                
    27xcFNk/oU2NeaLFriejnSmN5mqk3O79DtyxN58CNi+pWqJkyzDvvu/npO03e+0y                
    8oBrUD5aV122xwertpwYdyBnQ20NRK8STu1DY3751PphxoHG1redPmH60qP1naIW                
    WvHpBhXIth5j0z0ebcj5KiC8YZeH1E6BxOwr7uQHlgBrxQevQj+/p7B4rEmxHNpM                
    1XKy+Dy4ytpSENlVl0nwcPSScSUJe4EK5AwA0Bnrf/TLoDF2Bs7Z5lfkijx/i25w                
    25p9ziglD6KF/qEuH6rxlTLiiE+cSHbZ5yF+m+/b5NcTQfAoILs=                            
    -----END CERTIFICATE REQUEST-----                                               
    "}                                                                              
    INFO      Nov 30 20:06:30 [4153865792]: certificate_signing_request() : response
     : {"errorCode":"ITSERVICELAYER_PROVIDER_REQUEST_ERROR","message":"Device must b
    e activated and registered","statusCode":400,"trackingId":"00b6b9cd-daec-4808-ac
    c7-6ce603932fff"}                                                               
                                                                                    
    ERROR     Nov 30 20:06:30 [4153865792]: Certificate signing Failed : Device must
     be activated and registered...:(                                               
    ERROR     Nov 30 20:06:30 [4153865792]: certificate signing request() : parsing 
    failed...                                                                       
    INFO      Nov 30 20:07:01 [4153656896]: --requestType = 2                       
    INFO      Nov 30 20:07:01 [4153656896]: --lastCheckCode = 00000000-0000-0000-000
    0-000000000000                                                                  
    INFO      Nov 30 20:07:01 [4153656896]: --cert = /content/licensing/lic_csr.pem 
    INFO      Nov 30 20:07:01 [4153656896]: --token = Token-Id:C01001939QCXT6E      
    INFO      Nov 30 20:07:01 [4153656896]: --key = /content/licensing/lic_csr.key  
    INFO      Nov 30 20:07:01 [4153656896]: URL : https://eu-prod-utm.soa.sophos.com
    /api/device/2/license                                                           
    INFO      Nov 30 20:07:08 [4153656896]: response : {"errorCode":"ITSERVICELAYER_
    CLIENT_AUTHENTICATION_ERROR","message":"Authentication failed","statusCode":403,
    "trackingId":"0d662d84-b2fe-4bd6-b79a-ee2e5f65ec81"}                            
    ERROR     Nov 30 20:07:08 [4153656896]: license_check failed : Authentication fa
    iled                                                                            
    ERROR     Nov 30 20:07:08 [4153656896]: licensing_do_licensecheck() :parsing res
    ponse failed...                                                                 
    ####################################################                            
    generate certificate signing request (CSR)  Tue Nov 30 20:07:08 CET 2021        
                                                                                    
                                                                                    
    Tue Nov 30 20:07:09 CET 2021 certificate signing request generated with status :
    : 0                                                                             
                                                                                    
                                                                                    
    ####################################################                            
    INFO      Nov 30 20:07:09 [4153448000]: --requestType = 4                       
    INFO      Nov 30 20:07:09 [4153448000]: --serial = C01001939QCXT6E              
    INFO      Nov 30 20:07:09 [4153448000]: --deviceid = 130e4e93-9a90-4daa-93d0-fcb
    6aa6cd057                                                                       
    INFO      Nov 30 20:07:09 [4153448000]: --cert = /_conf/certificate/licensing/mf
    gr_vendor_SO.pem                                                                
    INFO      Nov 30 20:07:09 [4153448000]: --key = /_conf/certificate/licensing/mfg
    r_vendor_SO.key                                                                 
    INFO      Nov 30 20:07:09 [4153448000]: URL : https://eu-prod-csr.soa.sophos.com
    /api/certificate/1/signing                                                      
    INFO      Nov 30 20:07:09 [4153448000]: certificate_signing_request() : request 
    : { "serialNumber":"C01001939QCXT6E", "deviceId":"130e4e93-9a90-4daa-93d0-fcb6aa
    6cd057", "certificateSigningRequest":"-----BEGIN CERTIFICATE REQUEST-----       
    MIIDIjCCAgoCAQAwgZcxCzAJBgNVBAYTAkdCMRQwEgYDVQQIDAtPeGZvcmRzaGly                
    ZTERMA8GA1UEBwwIQWJpbmdkb24xFDASBgNVBAoMC1NvcGhvcyBMdGQuMQwwCgYD                
    VQQLDANOU0cxGzAZBgNVBAMMElNGX0MwMTAwMTkzOVFDWFQ2RTEeMBwGCSqGSIb3                
    DQEJARYPaW5mb0Bzb3Bob3MuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB                
    CgKCAQEA3DGPKQYL2csWlkq1b6a/UihKJhQ4WFdH4MuT7B4TGWF+/D26o80PTm23                
    lVgw9ll6y9oKgPDNOOyLCmtPERm7kqvN48L2m1lReSO4uBnrWNa38jvNfcGM31Wv                
    V9Czy/Ni4P/t2zIvuZzpzYNiwShG88Yh/mQqScUgBke9t5n7g/SXai4cK9Fk/Uu4                
    iuRrWA2asNfN8QGVhggOU/idE1YVj5Uuaaygd49a9/dK538kGcIycIeQXj6Fs5fl                
    21Fn8VWRzCEmrgc/wICw1si4tjd78Xsgfu1b3TbwNic/8hSxQZtHMAfRLHguY9Lz                
    3rs0zxaWH+4q8a9SrCJzlNm3h+/MewIDAQABoEUwGgYJKoZIhvcNAQkCMQ0MC1Nv                
    cGhvcyBMdGQuMCcGCSqGSIb3DQEJDjEaMBgwCQYDVR0TBAIwADALBgNVHQ8EBAMC                
    BeAwDQYJKoZIhvcNAQELBQADggEBAKB+bWpR58pTMfNN3e3dTQUVMNqXtC17umj1                
    pGgGuQBwvAUdfT5rinRkEtazpIdeM4qWtChm21Des9sgF7yiO5ZvgV9jiz4JGRDj                
    yeRpRDSzDDgobzm3nPNF6cohk/8YeN3nxxtwQHri79KZmPTN5+X8VmSmBpkCIazK                
    r9b6aSsWbmBD42zndl3KI2dTYGPjviGo3vJPZMYnBcLPylxJbIeuJzN77rUFdkpv                
    VjUZwHW+Q1tKMHUGbUOUqUobcGbZnpA1yEQBhBp8kEQTxyk4OsIPQlRQz6mtomF9                
    w+svCS4WPdU8/G5IwQyN9hG/0k9ipQBSG19Hg4XdjYsi+xsR5YQ=                            
    -----END CERTIFICATE REQUEST-----                                               
    "}                                                                              
    INFO      Nov 30 20:07:10 [4153448000]: certificate_signing_request() : response
     : {"errorCode":"ITSERVICELAYER_PROVIDER_REQUEST_ERROR","message":"Device must b
    e activated and registered","statusCode":400,"trackingId":"2001fe8a-189f-42f4-a4
    41-e54ad665c1d4"}                                                               
                                                                                    
    ERROR     Nov 30 20:07:10 [4153448000]: Certificate signing Failed : Device must
     be activated and registered...:(                                               
    ERROR     Nov 30 20:07:10 [4153448000]: certificate signing request() : parsing 
    failed...                                                                       
    INFO      Nov 30 20:19:55 [4153280064]: --requestType = 2                       
    INFO      Nov 30 20:19:55 [4153280064]: --lastCheckCode = 00000000-0000-0000-000
    0-000000000000                                                                  
    INFO      Nov 30 20:19:55 [4153280064]: --cert = /content/licensing/lic_csr.pem 
    INFO      Nov 30 20:19:55 [4153280064]: --token = Token-Id:C01001939QCXT6E      
    INFO      Nov 30 20:19:55 [4153280064]: --key = /content/licensing/lic_csr.key  
    INFO      Nov 30 20:19:55 [4153280064]: URL : https://eu-prod-utm.soa.sophos.com
    /api/device/2/license                                                           
    INFO      Nov 30 20:20:01 [4153280064]: response : {"errorCode":"ITSERVICELAYER_
    CLIENT_AUTHENTICATION_ERROR","message":"Authentication failed","statusCode":403,
    "trackingId":"7d7602d9-bf47-401d-8443-1252988b7ed8"}                            
    ERROR     Nov 30 20:20:01 [4153280064]: license_check failed : Authentication fa
    iled                                                                            
    ERROR     Nov 30 20:20:01 [4153280064]: licensing_do_licensecheck() :parsing res
    ponse failed...                                                                 
    ####################################################                            
    generate certificate signing request (CSR)  Tue Nov 30 20:20:02 CET 2021        
                                                                                    
                                                                                    
    Tue Nov 30 20:20:03 CET 2021 certificate signing request generated with status :
    : 0                                                                             
                                                                                    
                                                                                    
    ####################################################                            
    INFO      Nov 30 20:20:03 [4153857600]: --requestType = 4                       
    INFO      Nov 30 20:20:03 [4153857600]: --serial = C01001939QCXT6E              
    INFO      Nov 30 20:20:03 [4153857600]: --deviceid = 130e4e93-9a90-4daa-93d0-fcb
    6aa6cd057                                                                       
    INFO      Nov 30 20:20:03 [4153857600]: --cert = /_conf/certificate/licensing/mf
    gr_vendor_SO.pem                                                                
    INFO      Nov 30 20:20:03 [4153857600]: --key = /_conf/certificate/licensing/mfg
    r_vendor_SO.key                                                                 
    INFO      Nov 30 20:20:03 [4153857600]: URL : https://eu-prod-csr.soa.sophos.com
    /api/certificate/1/signing                                                      
    INFO      Nov 30 20:20:03 [4153857600]: certificate_signing_request() : request 
    : { "serialNumber":"C01001939QCXT6E", "deviceId":"130e4e93-9a90-4daa-93d0-fcb6aa
    6cd057", "certificateSigningRequest":"-----BEGIN CERTIFICATE REQUEST-----       
    MIIDIjCCAgoCAQAwgZcxCzAJBgNVBAYTAkdCMRQwEgYDVQQIDAtPeGZvcmRzaGly                
    ZTERMA8GA1UEBwwIQWJpbmdkb24xFDASBgNVBAoMC1NvcGhvcyBMdGQuMQwwCgYD                
    VQQLDANOU0cxGzAZBgNVBAMMElNGX0MwMTAwMTkzOVFDWFQ2RTEeMBwGCSqGSIb3                
    DQEJARYPaW5mb0Bzb3Bob3MuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB                
    CgKCAQEAwQihRCOvUy11hnDwtukf5i2hpXy1XWQZIWaYAf7zxFt1zqCcqzUPEIKp                
    dl5P/VK8oIe+zxxR/p1wbLHRdiEXi3o5uahnmnHJ68FxxpZuRsCMUYrrH509aRzU                
    3QFzRTEHQ8Sqdtc41gAIbCV23/62ZcijYA9400XOCIjPGGWoRK5T5rJxlox/DCrR                
    cG/rebyMjGblEj9ni2uVwSBU92v/VVTl3/cbErWw3gS/HmTeBJx1y2JTk8n3IYlm                
    DXc5c4LkRIF9YSSzJuFgo3ARRPcNbBEh8uXyPuXXYUgD2r5TO4Y4EK+VDTe88iGy                
    oQoxGDNb2vlJq+48fANIqdC6XQdOMQIDAQABoEUwGgYJKoZIhvcNAQkCMQ0MC1Nv                
    cGhvcyBMdGQuMCcGCSqGSIb3DQEJDjEaMBgwCQYDVR0TBAIwADALBgNVHQ8EBAMC                
    BeAwDQYJKoZIhvcNAQELBQADggEBAGFXNo3NPeX4YUpClgdj7XcrT/0Oq/dh57X7                
    EBRg39zx8pFqBmt4Rke7DB8HhAQBTbfv8CZma/8XE2Cn74T36nUUEbQEH2D78fUS                
    1BCAhRkpzugVM8NCcB0KaHpeqD/xdnMaKTzXV2Sizwm8pCV8lstmkCOZt+zLJh2T                
    TzUsRMUSODWt4Z0+P3+Kk+4PQtcUdqYsh4M1X5+bcBdyNrGQLypJ3oo2/VgiGA3T                
    amB6yrnrHCgEfm6fEW+5Ld/UwqW97aQt1sK1ip6pVlhASEHshymIUlWZZ5+I+Jne                
    SyCE9z3U+R0hctQBAFEMUksnuh3dOnUJ6P5xAAxNVI2zXWRyj50=                            
    -----END CERTIFICATE REQUEST-----                                               
    "}                                                                              
    INFO      Nov 30 20:20:03 [4153857600]: certificate_signing_request() : response
     : {"errorCode":"ITSERVICELAYER_PROVIDER_REQUEST_ERROR","message":"Device must b
    e activated and registered","statusCode":400,"trackingId":"e4b47349-5917-4662-b1
    b7-781ead3f69fe"}                                                               
                                                                                    
    ERROR     Nov 30 20:20:03 [4153857600]: Certificate signing Failed : Device must
     be activated and registered...:(                                               
    ERROR     Nov 30 20:20:03 [4153857600]: certificate signing request() : parsing 
    failed... 

  • Hello everyone,

    I found out by testing that the management PC I used for access the Sophos XG on the LAN

    interface need an own Internet access. After having this the registration worked. No guide stated this.

    Thanks a lot for your hints anyway!


    Bye

    Rene