topic Re: Upgrade ASA 9.10(1)11 %ERROR: Signature not valid for file in Network Security

Upgrade ASA 9.10(1)11 %ERROR: Signature not valid for file

wake_the_dragan — Sat, 18 Oct 2025 17:10:41 GMT

I have FPR-2120, currently running ASA 9.10(1)11, when I try to upgrade it, I am getting %ERROR: Signature not valid for file disk0:/cisco-asa-fp2k.9.16.4.SPA. Below is my asdm and fxos version. Any help would be greatly appreciated. Been troubleshooting this for 2 days.

Cisco Adaptive Security Appliance Software Version 9.10(1)11 Firepower Extensible Operating System Version 2.4(1.227) Device Manager Version 7.18(1)161

Accessing tftp://10.20.35.125/cisco-asa-fp2k.9.16.4.SPA...!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Verifying file disk0:/cisco-asa-fp2k.9.16.4.SPA...
Computed Hash SHA2: c974fac4d6d0bb24716004db528241c4
3db11d3e825ec3b91db163f66b976bd9
ac892572397562e8c8235d89986b33ba
b4ea418f8892010cb20e0f7721f53e42

%ERROR: Signature not valid for file disk0:/cisco-asa-fp2k.9.16.4.SPA.

Re: Upgrade ASA 9.10(1)11 %ERROR: Signature not valid for file

Rob Ingram — Sat, 18 Oct 2025 17:34:54 GMT

@wake_the_dragan have you tried upgrading using another image, i.e. cisco-asa-fp2k.9.16.4.85.SPA (Sept 25) - is the actual latest version. https://software.cisco.com/download/home/286312088/type/280775065/release/9.16.4%20Interim or an intermediate upgrade using an older image such as 9.12, then perform the upgrade to 9.16.4.85.

Re: Upgrade ASA 9.10(1)11 %ERROR: Signature not valid for file

wake_the_dragan — Sat, 18 Oct 2025 19:19:59 GMT

I have tried 9.12.2, 9.12.3, and 9.12.4 and same issue with them as well

Re: Upgrade ASA 9.10(1)11 %ERROR: Signature not valid for file

Marvin Rhoads — Sun, 19 Oct 2025 04:40:51 GMT

@wake_the_dragan Please use the latest INTERIM version as recommended by @Rob Ingram .

https://software.cisco.com/download/home/286312088/type/280775065/release/9.16.4%20Interim

The error message you cited indicates you are using the base release(s).

The interim release notes specifically mention this issue:

"The ASA now validates whether the ASDM image is a Cisco digitally signed image. If you try to run an older ASDM image than 7.18(1.152) with an ASA version with this fix, ASDM will be blocked and the message “%ERROR: Signature not valid for file disk0:/<filename>” will be displayed at the ASA CLI. (CSCwb05291, CSCwb05264"

Reference: https://www.cisco.com/web/software/280775065/163160/ASA-9164-Interim-Release-Notes.html

Re: Upgrade ASA 9.10(1)11 %ERROR: Signature not valid for file

wake_the_dragan — Sun, 19 Oct 2025 23:31:42 GMT

Just tried cisco-asa-fp2k.9.16.4.85.SPA, cisco-asa-fp2k.9.12.1.2.SPA, cisco-asa-fp2k.9.12.4.56.SPA, also cisco-asa-fp2k.9.12.4.67.SPA and running into same issue. Not sure what I am missing here

Re: Upgrade ASA 9.10(1)11 %ERROR: Signature not valid for file

johnlloyd_13 — Mon, 20 Oct 2025 03:13:08 GMT

hi,

have you tried to transfer the ASA image from USB or from ASDM?

copy disk1: disk0:

if it's still not working, i'd suggest open a TAC case or perform a scheduled reload.

Re: Upgrade ASA 9.10(1)11 %ERROR: Signature not valid for file

wake_the_dragan — Mon, 20 Oct 2025 16:22:02 GMT

I opened a tac case, they said to upgrade from fxos, and that worked