topic Re: DNAC CIMC 4.1(1f) Support in Cisco Catalyst Center

DNAC CIMC 4.1(1f) Support

Damien Miller — Wed, 13 May 2020 23:53:28 GMT

Hello all,

Can anyone confirm if it is OK to update a DNAC Server to CIMC 4.1(1f)? I have both both DN1 and DN2 hardware that could use updating. There is a field notice telling us not to exceed 4.0(4b) since 4.0(4c) will prevent it from booting.
https://www.cisco.com/c/en/us/support/docs/field-notices/704/fn70456.html

The field notice cites two bugs, one DNAC specific indicating that it may be fixed as of 4.0(4f).
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvr16833

The other that cites it is fixed in 4.1 as well.
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvq38078

Re: DNAC CIMC 4.1(1f) Support

Dan Rowe — Thu, 14 May 2020 13:43:11 GMT

Here are the current CIMC supported & recommended firmware versions for the latest version of DNA center:

Supported Firmware

Cisco Integrated Management Controller (Cisco IMC) versions are independent from Cisco DNA Center releases. This release of Cisco DNA Center has been validated against the following firmware:
• Cisco IMC Version 3.0(3f) for appliance model DN1-HW-APL
• Cisco IMC Version 3.1(2c) for appliance model DN2-HW-APL
• Cisco IMC Version 3.1(3a) for appliance model DN2-HW-APL-L
• Cisco IMC Version 4.0(1a) for appliance model DN2-HW-APL-XL
The preceding versions are the minimum firmware versions. While some later versions are also supported, Cisco DNA Center is not compatible with Cisco IMC 4.0(4c) and later. Do not update later than Cisco IMC 4.0(4b).

Re: DNAC CIMC 4.1(1f) Support

Raoul1971 — Wed, 03 Jun 2020 12:06:01 GMT

greetings,

4.0(4b) was released back in april 2019.

do you think the newer firmwares will be qualified against the newer dna appliance software in the near future?

quite a number of CVEs have been addressed since then, noteably the mds side-channel fixes for intel cpus.

thank you,

raoul.

Re: DNAC CIMC 4.1(1f) Support

tpoulose — Wed, 10 Jun 2020 16:43:32 GMT

4.0.(4i) is supported see https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvr35414

Re: DNAC CIMC 4.1(1f) Support

Raoul1971 — Wed, 10 Jun 2020 19:07:38 GMT

thank you for this information.

the bug report that you cited even mentions that newer versions might be compatible:

"With the release of 4.0(4i) firmware, UEFI secure boot is withdrawn for DNAC PID, so it is possible to upgrade to 4.0(4i) and higher. Do not use 4.0(4c) -- 4.0(4g)."

this would indicate that 4.0(4k) and 4.1(1f) should be compatible.

can you confirm?

cheers,

raoul.

Re: DNAC CIMC 4.1(1f) Support

Leo Laohoo — Wed, 26 May 2021 03:28:49 GMT

Hi @danirowe & @tpoulose

What is the "latest" TAC recommendation?

FN–70456 says “UCS Cisco IMC Firmware Version 4.0(4b) is the latest release supported on affected Cisco DNA Center Appliances until Cisco announces support for the Secure Boot feature in the Cisco DNA Center software”, however, FN-70432 (mentioned in FN-70456) says 4.0(4b) is in the “affected” table.

Re: DNAC CIMC 4.1(1f) Support

Mike.Cifelli — Wed, 26 May 2021 12:29:21 GMT

Hi @Leo Laohoo just adding some information that may assist. I am currently running a 3 node cluster (DN2-HW-APL) with 4.0(4m) firmware. I worked with TAC ~2-3 months ago on this same concern. Per this guide: Release Notes for Cisco DNA Center, Release 2.1.2.x - Cisco

Do not update later than Cisco IMC 4.0(4b), unless you update to 4.0(4k) or later. See 'Supported Firmware' section. HTH!

Re: DNAC CIMC 4.1(1f) Support

Leo Laohoo — Wed, 26 May 2021 22:08:26 GMT

@Mike.Cifelli wrote:

Do not update later than Cisco IMC 4.0(4b), unless you update to 4.0(4k) or later.

Hi @Mike.Cifelli,

Thanks for this info. So DNAC v2.1.2, anything higher than 4.0(4k) (but stay in 4.0). This is how I read it.

With DNAC v2.2.2, 4.1(1h) is the recommended release.

Best Regards/Leo