topic Re: FMC update error in Network Security

FMC update error

michael18 — Wed, 26 Apr 2023 07:48:42 GMT

Im trying to migrate from Virtual FMC to Physical. I need to update the VDB on the virtual to match the Physical but when running download updates in the system>updates tab I get error: peer certificate cannot be authenticated with known CA certificate

the version is 7.0.1

theres was a bug for this that looks like it was fixed in previous version.

The download updates were working previously.

the new physical is doing the same when trying to update the geo updates.

access through the firewall is working. DNS is working.

what else can I look at.

Re: FMC update error

manabans — Thu, 27 Apr 2023 00:59:18 GMT

The symptoms shared match the Field notice - https://www.cisco.com/c/en/us/support/docs/field-notices/725/fn72501.html
Field Notice: FN - 72501 - Firepower Software: Automatic Software Downloads And Content Updates Might Fail After January 10, 2023 - Software Upgrade Recommended

Workaround:
1. Enter sudo su in order to elevate to root.
2. Enter mv /etc/sf/keys/fireamp/thawte_roots /etc/sf/keys/fireamp/thawte_roots_bk in order to back up the current CA root bundle used for downloads.
3. Enter ln -s /etc/ssl/certs/ /etc/sf/keys/fireamp/thawte_roots to cause the updated CA root bundle to be used for subsequent downloads.

Re: FMC update error

michael18 — Thu, 27 Apr 2023 07:48:31 GMT

Thanks manabans

Ive searched everywhere for an answer but didnt find it. Thanks for sharing the answer.

Re: FMC update error

Khitijkhanna66240 — Wed, 10 Jan 2024 20:23:28 GMT

Got a New 4600 and got the same error ! thanks for the solution! it works