I've hit this issue a few times and don't know whether there is an official way to do this.
- Add IOS-XE images to DNAC and set them as Golden - for example C9300 IOS-XE 17.9.5
- Upgrade some switches from Inventory, Action, Software Image, Image Update and set to Activate
- An SMU is released for 17.9.5 that you import into DNAC and set as Golden
- Re-upgrade some switches, however this has always failed if I set to Activate
As a workaround, I uncheck 'Activate' and once DNAC has pushed the image to the switches, I manually activate it from the CLI.
Is there a way to push SMU's out after the main IOS-XE image has already been pushed out and activated.