ICX7150-24P No HTTP or HTTPS access on 9.0 or 10.0

[zhuk]

HTTP and HTTPS both work perfectly on 08.0.95s. I tried on both 09.0.10k and 10.0.10g_cd3 and can't get the web interface working at all.

"crypto-ssl certificate generate" doesn't exist at all in the cli after upgrading.

ICX7150-24P Router(config)#cry                 
  crypto                        Crypto configuration
ICX7150-24P Router(config)#crypto 
  key       key configuration
  openssl   Modify openssl settings

I tried HTTP and HTTPS:

ICX7150-24P Router(config)#show web
HTTP server status: Enabled
HTTPS server status: Enabled
No web connection.

nmap:

Starting Nmap 7.98 ( https://nmap.org ) at 2025-11-10 11:12 -0600
Nmap scan report for 192.168.1.20
Host is up (0.0043s latency).

PORT   STATE  SERVICE
80/tcp closed http

Nmap done: 1 IP address (1 host up) scanned in 0.52 seconds


Starting Nmap 7.98 ( https://nmap.org ) at 2025-11-10 11:12 -0600
Nmap scan report for 192.168.1.20
Host is up (0.0055s latency).

PORT    STATE  SERVICE
443/tcp closed https

Nmap done: 1 IP address (1 host up) scanned in 0.52 seconds

I found a post talking about a TPM issue. Maybe this is it?

ICX7150-24P Router#dm verify-device-certs
Verifying TPM files ...
Failed: Check TCSD_PS Files

show running-config:

Current configuration:
ver 10.0.10g_cd3T213
stack unit 1
module 1 icx7150-24p-poe-port-management-module
module 2 icx7150-2-copper-port-2g-module
module 3 icx7150-4-sfp-plus-port-40g-module
stack-port ethernet 1/3/1
stack-port ethernet 1/3/3
global-stp
vlan 1 name DEFAULT-VLAN by port
spanning-tree
ip route 0.0.0.0/0 192.168.1.1
optical-monitor
optical-monitor non-ruckus-optic-enable
clock summer-time
clock timezone us Central
chassis fanless 1
ip dns server-address 192.168.1.88
ntp
disable serve
server 0.pool.ntp.org
server 1.pool.ntp.org
server 2.pool.ntp.org
manager disable
manager port-list 987
interface management 1
interface ethernet 1/3/1
speed-duplex 10g-full
interface ethernet 1/3/2
speed-duplex 10g-full
interface ethernet 1/3/3
speed-duplex 10g-full
interface ethernet 1/3/4
speed-duplex 10g-full
interface ve 1
ip address 192.168.1.20 255.255.255.0
username <removed> password 8 <removed>
aaa authentication login default local
aaa authentication web-server default local
aaa authentication enable default local
ip dhcp-client disable
end