DNA CENTER IMAGE REPOSITORY ERROR NCSW10301

[Bahman]

I'm trying to download a new IOS version through the IMAGE REPOSITORY, but I get the following error:

"NCSW10301: Unable to download the image from cisco.com : Failed to communicate to Cisco.com. Please try again later.."

DNAC current version: 2.3.5.3-70194

Has anyone experienced a similar glitch

Thanks in advance

Bahman

[Bahman · Accepted solution]

Ok, it seems to be a bug. CSCwe63249

[AHaugen]

Updated to 2.3.5.4-70852
Bug seem to still exist.

[Tomas de Leon]

The problem is with an external provider which is having sporadic issues with APIs that are tied to this feature.  The problem has been escalated and we are working with the teams to get the issue resolved.

Temporary Workarounds:

• if you need a particular image, you can download to their laptop or another device, Then you could manually import to Cisco Catalyst Center.
• You have another device with the necessary image in flash. Copy the image from the device to internal server. Then import the image to Cisco Catalyst Center from internal server.

[Frank S]

Just wanted to stick my 2 cents in. I am as well, recieving this error. Started a while back, just neglected to pursue it due to the "workaround". But it's effecting other items as well, KGV doesn't download either, but guess what? You can do that manually as well. With TAC, we did notice my Trustpool is empty. and there doesn't seem to be a good way to download the entire bundle, as it only accepts single certs, ie: cer/etc..

Quick edit, I was on various versions... and currently on 2.3.5.4 with the same error

[pwtn]

2.3.5.5-70026 bug still present.

Cannot download IOS images. Cannot download KGV file.

[Tomas de Leon]

PWTN,

Your symptoms seem like you would need to update the trustpool bundle since there is a new update.

An example:

Go to:

Settings / Trust & Privacy / Trustpool

If there is an Informational Banner with

"A new Cisco PKI trustpool certificate bundle is available. Update trustpool on controller now"

** Click "Update trustpool on controller now"

Successfully updated.

Once updated, re-try your work task….

[pwtn]

Thanks Tomas, updating the trustpool seems to have done the trick:

[bfbcnet]

Does anyone know why the trustpool is not updated automatically? I have had these issues and have had to manually update it twice in the last year. It is a pain that this update is not automatic and needs manual intervention when things on DNA-C stop working. Cisco seems to change it pretty regularly, and it just breaks stuff, and you don't know why until you check the trust pool. Even an alert on the dashboard that there is a new package would go a long way on this rather than having to did into the system section to check this all the time

For us the impact was our DNA-C did not pick up and alert us that there was a vulnerability in the code we had been running on some of our devices for three months. Not the best...