topic Re: FMC unable to download updates in Network Security

FMC unable to download updates

tato386 — Mon, 22 Aug 2022 14:59:09 GMT

I a running into what appears to be this bug: CSCvm81052 : Bug Search Tool (cisco.com) but I am hesitant to implement the fix because I am running v7.0.1.1 FMC and the bug should have been fixed by now. Maybe I have something else going on? I ran the this and the output is attached.

openssl s_client -connect update-manifests.sco.cisco.com:443

Thoughts?

Thanks,

Diego

Re: FMC unable to download updates

balaji.bandi — Mon, 22 Aug 2022 18:34:31 GMT

For me Looks something wrong

SSL handshake has read 4197 bytes and written 470 bytes
Verification error: unable to get local issuer certificate

worth Open a TAC case to investigate for you.

Re: FMC unable to download updates

Marius Gunnerud — Mon, 22 Aug 2022 21:35:49 GMT

What version is the FTD running? Before replacing the certificate file as indicated in the bug ID you posted, I suggest trying the workaround in this bug first.

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwa88571

This is just updating / adding a certificate.

Re: FMC unable to download updates

tato386 — Tue, 23 Aug 2022 17:14:45 GMT

I was at 7.0.1.1 and did manual upgrade to 7.0.4 and it's back to normal now. Hopefully it won't come back but if it does I will use that workaround.

Thanks all!

Re: FMC unable to download updates

HQuest — Fri, 26 Aug 2022 04:34:44 GMT

For me, this seems to be unrelated to bug CSCvm81052. The latest FMC 7.0.2.1-12 code has the exact same certificate as of the one suggested as fix from the bug, however updates are still failing. It is interesting, though, that the Geolocation and SRU/LSP databases are downloaded just fine - just the FMC/FTD product updates are reported as "corrupted".