topic Re: Glad I could help! in Wireless

Cisco AP stuck in Boot Loop - Digital Signature Failed Validation

malering — Mon, 05 Jul 2021 08:24:47 GMT

So I had a image go bad on an 3602i AP, loaded up a new IOS on the AP. Loaded the new IOS, everything seems fine until it get just about done with the boot and then it reboots itself again. Lots of output but the meat and potatos is this

*Aug 10 07:44:19.999: Using SHA-1 signed certificate for image signing validation.
*Aug 10 07:44:19.999: Error opening file flash:/ap3g2-k9w8-mx.153-3.JA/final_hash.sig
*Aug 10 07:44:19.999: Digital Signature Failed Validation (flash:/ap3g2-k9w8-mx.153-3.JA/final_hash)
*Aug 10 07:44:19.999: AP image integrity check FAILED!

*Aug 10 07:44:19.999: Release image validation failure - restarting AP.

Any ideas?

Ohh, looks like the image you

LJ Gabrillo — Fri, 22 Aug 2014 02:36:19 GMT

Ohh, looks like the image you uploaded is corrupted. Its digital signature is,

Try this when you try to upload a new image
1. If you got it from a *.tar file, extract it to get to the *.bin file

2. copy that bin file

#copy /verify tftp:<IP> flash:

though, try to download the image again.

Reloading the Access Point

Saurav Lodh — Fri, 22 Aug 2014 13:26:44 GMT

Reloading the Access Point Image

If your access point has a firmware failure, you must reload the complete access point image file using the Web browser interface or on 1100 and 1200 series access points, by pressing and holding the MODE button for around 30 seconds. You can use the browser interface if the access point firmware is still fully operational and you want to upgrade the firmware image. However, you can use the MODE button when the access point has a corrupt firmware image. On 350 series access points, you cannot use the MODE button to reload the image file, but you can use the CLI through a Telnet or console port connection.

refer http://www.cisco.com/c/en/us/td/docs/wireless/access_point/12-2_15_JA/configuration/guide/i12215sc/s15trb.html

Worked for me.Load AP with

Lovleen Arora — Mon, 25 Aug 2014 20:53:03 GMT

Worked for me.

Load AP with recovery LWAPP image, then just plug into the WLC network and it was perfect..

Thanks

Glad I could help!

malering — Tue, 26 Aug 2014 17:51:31 GMT

Glad I could help!

Thanks for the replies

malering — Tue, 26 Aug 2014 17:53:33 GMT

Thanks for the replies everyone! This was a new IOS pushed out to the device AFTER a IOS failure. So no web browser access. The new IOS had an issue with the hash, which I thought was weird (obviously a bad image). Rather than try to reinvent the wheel, I just used the recovery image.

What I ended up doing was downloading, and booting off of inside rommon, the recovery image via tar -xtract over tftp, letting the WLC grab the AP and push out the IOS onto the AP which solved my issue. Thanks again for the help.

This discussion has been

rosaho — Thu, 30 Jul 2015 23:10:39 GMT

This discussion has been reposted from Additional Communities to the Other Wireless - Mobility Subjects community.

Re: Glad I could help!

wanfaris90 — Mon, 08 Jan 2018 03:17:41 GMT

* perform a mode button image recovery

OR, if you can get onto the AP console, and if the AP has another viable IOS image on flash, then:

* hit the escape key when you see "Interrupt within 5 seconds to abort boot process"
* at the ap: bootloader prompt, enter the following command:
ap: dir flash:
* look for a viable IOS image folder, such as "c1140-rcvk9w8-mx"
* set the bootloader BOOT variable to boot that image, for example:
ap: set BOOT flash:/c1140-rcvk9w8-mx/c1140-rcvk9w8-mx
* issue the command
ap: reset