Hi William,
If you look at the new firmware file name you can note the "k3" before the cop.sgn;
SIPcmterm-88xx-sip.11-0-1-11.k3.cop.sgn
This means you would need to install the file listed below before proceeding with the new firmware installation;
Cisco Unified Communications Manager RSA Version-3 keys COP file
To improve software integrity protection, new RSA keys are being used to sign Cisco Unified Communications Manager releases and any of their associated updates such as Phone Firmware, Device Packages, DST Updates, Locales, Dialplans, or any other update that can be applied to the system.
Who needs this fix: If you are already running CUCM release 10.x or higher you already have this fix and do not need to install this Cisco Options Package (COP) file.
If you are running an Engineering Special (ES) or Service Update (SU) that already contains CSCua88701 you do not need to install this COP file.
CSCua88701 is included in: - 8.5.1.17123-1 and higher - 8.6.2.24122-1 and higher - 9.1.2.11018-1 and higher Follow the link to the CDETS for additional details.
If you are running an ES or SU less than the builds listed in the previous bullet, you need to install this COP file if:
- You are upgrading to CUCM Release 10.5(1), or later.
- You are installing Phone Firmware, or any other update or COP file that has been signed with an RSA v3 key. RSA v3 files will contain the k3 designation seen in the following example and will start appearing on CCO mid 2015.
From;
http://www.cisco.com/web/software/282204704/18582/RSA3ver4.pdf
Here is the path on CCO;
Unified Communications Manager / CallManager / Cisco Unity Connection Utilities-COP-Files
Cheers!
Rob
