Cisco Crosswork Data Gateway 7.2 Installation and Configuration Guide for Cloud Applications

Crosswork Data Gateway troubleshooting issues and recommended actions

Updated: January 29, 2026

Want to summarize with AI?

Details troubleshooting procedures for common Crosswork Data Gateway connectivity issues with Cisco Crosswork Cloud, including resolutions for NTP clock drift and proxy server configuration errors to restore secure communication.

This section lists common issues that may occur with Crosswork Data Gateway's connectivity to the Cisco Crosswork Cloud application, and provides steps for identifying the root cause and resolving the issue.

Table 1. Troubleshooting issues and actions
Issue	Action
Crosswork Data Gateway cannot be enrolled with Cisco Crosswork Cloud because of an NTP issue (clock drift between the two).	Log in to the Crosswork Data Gateway VM. From the main menu, navigate to 5 Troubleshooting > Run show-tech. Enter the destination where you want to save the tarball containing logs and vital data. Click OK. In the show-tech logs (found in `session.log` at `/cdg/logs/components/controller-gateway/session.log`), look for this error message: `UNAUTHENTICATED: invalid certificate. reason: x509: certificate has expired or is not yet valid` This error indicates a clock drift between Crosswork Data Gateway and Cisco Crosswork Cloud. From the main menu, navigate to 3 Change Current System Settings > 1 Configure NTP. Configure NTP to synchronize with the clock time on the Cisco Crosswork Cloud server. After configuring NTP, attempt to enroll the Crosswork Data Gateway with Cisco Crosswork Cloud again.
Crosswork Data Gateway does not have direct connectivity to external web services.	If a proxy server is missing in your environment, configure a proxy server. If a proxy server is already configured, verify that the proxy URL is correct. Check that the credentials of the proxy server (certificate, proxy name, etc.) are correct. To update the proxy server details on the Crosswork Data Gateway, see Configure control proxy.

Need help?

Open a support case

(Requires a Cisco Service Contract)

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.