I'm running a script, that checks the configuration changes between the saved and running config. I have noticed, that the hash that goes after

crypto pki certificate chain TP-self-signed-34586112
certificate self-signed 01

Has changed after a reboot. Is it normal? Why does the hash change after a reboot?


1 Answer 1


Yes this is normal. On a Cisco device, a self-signed certificate is not persistent by default. In other words on every reboot it generates a new keypair and a new certificate.

To configure a persistent certificate see Persistent Self-Signed Certificates.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.