topic Re: Unable to verify image in DNA in Cisco Catalyst Center

Unable to verify image in DNA

SyedMJunaidMumtaz — Tue, 04 Oct 2022 19:17:52 GMT

I have downloaded latest firmware for cisco switch 9300 48 ports 17.3.5 but after successfully downloaded, it is showing unable to verify instead of verified.

Please if you have any suggestion and I've attached screenshot for your reference verified my old image.

DNA Version: 1.3.3.9

Switch current version is verified 16.9.4 and series 9300.

Thanks,

Re: Unable to verify image in DNA

willwetherman — Wed, 05 Oct 2022 14:18:38 GMT

Hi @SyedMJunaidMumtaz

Cisco DNA Center uses the Integrity Verification application to validate and verify that downloaded software images are valid and authentic. It does this by comparing the software images with an authoritative set of Known Good Values (KGV) for all supported Cisco devices.

Firstly you need to check that DNA Center has downloaded the latest KGV file. You can check this under System -> Settings -> Integrity Verification. If the KGV is not up-to-date, you can import the latest KGV directly from Cisco, or if DNA Center is air-gapped, you can download the KGV from the following and upload to DNA Center manually.

https://tools.cisco.com/cscrdr/security/center/files/trust/Cisco_KnownGoodValues.tar

Once the KGV is up-to-date, the software image that you downloaded should update to 'Verified'

Will

Re: Unable to verify image in DNA

SyedMJunaidMumtaz — Wed, 05 Oct 2022 15:16:21 GMT

This is showing error after successfully download and when i try to see in the integrity option for verification there is failed status and even when try to click download from cisco it is giving error. Attached screenshot for your reference.

And, I also same image i tried to import from locally but still the same, not verified.

Re: Unable to verify image in DNA

willwetherman — Wed, 05 Oct 2022 17:01:41 GMT

I have seen a similar error that was due to an expired certificate chain. Can you check and ensure that the DNA Center Trustpool is up-to-date. You can check this under Settings -> Trust & Privacy -> Trustpool.

If this still fails then you will need to raise with Cisco TAC. Note that DNA Center 1.3.X.X was announced end-of-life in 2020 with the last date of software support on 31st July 2022. As such, you may need to upgrade to the latest recommended version before you will receive any support.

https://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/dna-center/eos-eol-notice-c51-743426.html

Re: Unable to verify image in DNA

SyedMJunaidMumtaz — Wed, 05 Oct 2022 20:20:02 GMT

Thank you @willwetherman. I checked and looks like up to date please see attached screenshot. And, yes we are planning to upgrade all switches and then WLC, ISE, DANC if we just upgrade DNA so i am afraid other issue will occur.

Re: Unable to verify image in DNA

quanahnelson351 — Fri, 30 Jun 2023 07:11:15 GMT

@SyedMJunaidMumtaz написал (-а):
I have downloaded latest firmware for cisco switch 9300 48 ports 17.3.5 but after successfully downloaded, it is showing unable to verify instead of verified.
Please if you have any suggestion and I've attached screenshot for your reference verified my old image.
Photos and images play a vital role in creating impactful designs, and when it comes to a praise logo, they become even more significant. By utilizing high-quality photos or images, we can create visually appealing logos that reflect positivity, recognition, and celebration. It's important to explore reliable sources for images to ensure the best representation of the praise logo, allowing us to create designs that inspire and uplift others. Let's embrace the power of imagery to spread joy and appreciation through our praise logo designs.

DNA Version: 1.3.3.9
Switch current version is verified 16.9.4 and series 9300.
Thanks,

interesting