topic Re: PI 3.2.2 can't download updates in Wireless

PI 3.2.2 can't download updates

patoberli — Mon, 05 Jul 2021 15:02:53 GMT

Hi all

I would like to install the latest hotfix offered in my PI 3.2.2 installation (PI_3_2_2_update_01-1.0.8.ubf) but Prime throws the following error:

sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Do you also get this error?

This happens when I click the Download button in the PI Software Updates interface.

Re: PI 3.2.2 can't download updates

Mark Elsen — Thu, 04 Jan 2018 10:09:35 GMT

- This is a JAVA error, clearly someone messed up, (contact TAC); you could as a workaround download the ubf from cisco.com and install it manually.

Re: PI 3.2.2 can't download updates

patoberli — Thu, 04 Jan 2018 10:17:39 GMT

Yeah, I guess it's a certificate issue. Probably an expired or somewhat hardcoded and exchanged one.

Does the download functionality work for you?

Re: PI 3.2.2 can't download updates

Mark Elsen — Thu, 04 Jan 2018 10:21:29 GMT

- No, I get the same error , indeed, ; as stated you could try the manual download and install

Re: PI 3.2.2 can't download updates

BillJensen — Thu, 04 Jan 2018 15:04:17 GMT

Was their a fix for the issue?

Re: PI 3.2.2 can't download updates

patoberli — Thu, 04 Jan 2018 15:06:39 GMT

So far not. The workaround is to manually download the update from the Cisco Download site (https://software.cisco.com/download/release.html?mdfid=286313442&flowid=&softwareid=284272933&release=3.2.2&relind=AVAILABLE&rellifecycle=&reltype=latest) and upload it to the PI. Just did that 5 minutes ago and it's installing it now.

Re: PI 3.2.2 can't download updates

BillJensen — Thu, 04 Jan 2018 15:07:58 GMT

thanks for the update

Re: PI 3.2.2 can't download updates

Mark Elsen — Thu, 04 Jan 2018 15:13:28 GMT

- Actually , if you look at the release notes, of the ubf, in the install procedure , ONLY the manual download is mentioned. It's not sure wether this must be seen as a requirement,one could argue; it should then not be advertised in the prime->administration -> download center , but then one could be abstinated of it's existence too...

Re: PI 3.2.2 can't download updates

patoberli — Thu, 04 Jan 2018 15:15:39 GMT

Update just successfully installed. For whatever reason it didn't take the "usual" 60-90 minutes, but just 20.

Re: PI 3.2.2 can't download updates

patoberli — Thu, 04 Jan 2018 15:35:39 GMT

True, but it also doesn't work for my outstanding Device Package update 😉

Re: PI 3.2.2 can't download updates

Mark Elsen — Thu, 04 Jan 2018 15:42:38 GMT

- Does this then give the same errors ?

Re: PI 3.2.2 can't download updates

patoberli — Thu, 04 Jan 2018 15:47:59 GMT

Yes, exactly the same error, even after restarting the PI service.
Btw. the password change link for the Cisco account inside PI is also broken, points to: http://rpf.cloudapps.cisco.com/RPF/passwordreset.do which throws this error:
JBWEB000065: HTTP Status 404 - /RPF/passwordreset.do
JBWEB000309: type JBWEB000067: Status report

JBWEB000068: message /RPF/passwordreset.do

JBWEB000069: description JBWEB000124: The requested resource is not available.

Re: PI 3.2.2 can't download updates

BillJensen — Thu, 04 Jan 2018 23:01:54 GMT

I was able to upload a 4g file to this server yesterday with tftp but today when I try it it gives me this error.

The file today is .03mb.

va-cpi-p/admin# copy tftp://10.11.1.19//InstallerUpdateBE-1.0.5.tar.gz disk://defaultRepo
Error code 2: Access violation

Re: PI 3.2.2 can't download updates

BillJensen — Thu, 04 Jan 2018 23:05:25 GMT

Did something on the CPI Server change with the upgrade from 3.1.0 to 3.2.2?
My tftp server on my macbook pro didn't change and I was able to copy a file yesterday using
va-cpi-p/admin# copy tftp://10.11.1.19//PI-Upgrade-3.X_to_3.2.0.0.258.tar.gz disk://defaultRepo

Re: PI 3.2.2 can't download updates

patoberli — Fri, 05 Jan 2018 08:03:39 GMT

Possibly, but please open another thread for your issue.

Re: PI 3.2.2 can't download updates

rubo — Mon, 15 Jan 2018 18:44:59 GMT

Hi All

I get another error whan going into the update page :

"There was a problem connecting to cisco.com from the Prime Infrastructure Server"

running PI3.2.2 U1 but also had the error on PI 3.2.1

Anyone else getting this error ?

Re: PI 3.2.2 can't download updates

Scott Fella — Mon, 15 Jan 2018 19:00:29 GMT

You have port 443 opened on the FW to allow this? I know that others have just manually did the updates. Since you mentioned it happened before, seems like maybe a FW issue.

Re: PI 3.2.2 can't download updates

rubo — Mon, 15 Jan 2018 19:03:46 GMT

Port 443 is open and i see a "allowed" logentry in the firewalllog.

But thanks for replying.

I have seen via google that this has been a problem before can your PI get updates ?

Re: PI 3.2.2 can't download updates

Scott Fella — Mon, 15 Jan 2018 19:07:29 GMT

I have 3.1 in the lab that works fine our production is not allowed and we manually perform the upgrade.

Re: PI 3.2.2 can't download updates

patoberli — Tue, 16 Jan 2018 07:41:52 GMT

Can you login to the console of your PI and test if you can ping cisco.com?

The downloadserver is probably under a different URL, but this should work too.

Also enter a 'show clock' and make sure the date/time is correct.

Anyway, in my case the update check also stopped working (PI 3.2.2 Hotfix 1) and I get the following error message:

There was a problem connecting to cisco.com from the Prime Infrastructure Server. Alternatively you can go here, search for 'Prime Infrastructure' product updates.
Download the latest update file and upload it to your server using the 'Upload' link. Make sure the selected update is greater than your Prime Infrastructure instance version.
Prime Infrastructure Version: 3.2.0