CUCM 11.0 - cannot upload firmware - error encountered MD5: issue

[rajesh.kumar]

Hi 

We have CUCM 11.0 on production, we have mismatch in the IP Phones firmware

We wanted to upgrade all the IP phones firmware to 9.2.1

While uploading the firmware on CUCM, we are getting following error as attached.

Also, we have some IP Phones as spare with older firmware version.

When we want to use that IP phone & upgrade firmware,  we are not able to load required firmware on CUCM

Psl. suggest.

Rgds

Rajesh Kumar

[Rajan]

Hi Rajesh,

You need to install the cop file "ciscocm.version3-keys.cop.sgn" before installing this firmware

http://www.cisco.com/web/software/282204704/18582/RSA3ver4.pdf

Download link for this cop file:

https://software.cisco.com/download/release.html?mdfid=283782839&reltype=all&relind=AVAILABLE&release=COP-Files&softwareid=282204704&sortparam=2

HTH

Rajan

[rajesh.kumar]

Dear Rajan

when I install, COP file ciscocm.version3-keys.cop.sgn also, I get same error.

It is not MD5 error, I have tried with firmware 8.5.2 and 9.x, CUCM is throwing same error for all these. I think only 9.4 works fine.

Now, COP file ciscocm.version3-keys.cop.sgn also gets same error. Any suggestion.

Rgds

Rajesh

[Deepak Rawat · Accepted solution]

First of all, you do not need to install ciscocm.version3-keys.cop.sgn cop file on CUCM 11 as the functionality which this cop file provides is already incorporated natively with CUCM 11. You are most definitely hitting the below defect:

https://tools.cisco.com/bugsearch/bug/CSCuv73972/?reffering_site=dumpcr

Do below:

Download the complete ZIP folder cmterm-7945_7965-sccp.9-2-1.zip and then unzip the same

Login to OS administration GUI of the CUCM and Navigate :: Software Upgrades >> TFTP File Management.

Click on upload files and upload all the unzipped files (one-by-one) in the directory. Use Directory as "/"

Restart the TFTP service

Note: Perform the above steps for all the CM/TFTP servers

Regards

Deepak

[fedeobregon]

I tried to do that but when I upload a firmware that weighs 430MB, I have an error in my browser. "Secure Connection Failed".

[Rajan]

I just checked the screenshot and I see that you are installing a normal firmware only, So you dont need to install that COP file  but check the md5 value of the downloaded firmware cop file and see if that matches exactly. If not download the file again

[Rob Huffman]

Hi Deepak,

CSCuv73972

CUCM 11.0.1 only accepts .cop files signed by the RSA version 3 keys.

Thanks for linking up this bug (+5). This seems like a rather significant development yet I don't see this note mentioned on any of the CUCM 11.x Release Notes, Readme's, New and Changed information, Important Notes or even the Open caveats section......??

Given the impact that this will have on many people who upgrade to 11.x in the near future I would think that Cisco would highlight this change in behavior! There are no k3.cop.sgn files for any 79xx firmware and many people choose not to upgrade firmware during a CUCM upgrade for various reasons but they might if this development/change was known to them prior to moving forward. I also think that Cisco may not want to mark this bug as Fixed when in fact the workaround is a rather clumsy and cumbersome method at best.

I don't want to shoot the messenger here my friend, so I thank you once again for bringing this bug to the forefront!

Cheers!

Rob

[Deepak Rawat]

Hi Rob,

Your suggestions are always welcome and appreciated. As far as the information related to this is concerned, then it is indeed documented in the Release Notes

http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/rel_notes/11_0_1/CUCM_BK_R30921A8_00_CUCM_release-notes_1101/CUCM_BK_R30921A8_00_release-notes-for-cisco-unified_chapter_01.html#CUCM_RF_PDB46585_00

Also, I would like to add again that the ciscocm.version3-keys.cop.sgn cop file is only required to be installed on CUCM 11 if you are upgrading from a CM version earlier than 10.0(1). In case of fresh installation for CUCM 10.0(1) and later or if someone is upgrading from 10.0(1) or later, no need for this COP file

Hope this helps.

Regards

Deepak

[Rob Huffman]

Hi Deepak,

Thanks for pointing that out my friend! (+5) I did not look in the upgrade section which is my BAD! 

From the section you nicely linked, I think this;

Release 11.0(1) accepts Cisco Options Package (COP) files that are signed with RSA version 3 keys.

Should be shown as follows;

Release 11.0(1) only accepts Cisco Options Package (COP) files that are signed with RSA version 3 keys.

I would also like to see this in the "new and changed" notes if possible.

Just my 2 cent$ :)

Cheers!

Rob

[Deepak Rawat]

Hello Rob,

I completely understand your point on making the documentation more specific but unfortunately I am not the right/direct person in order to implement this change. However, if I will ever get an opportunity to discuss this with the concerned people then will definitely raise this point. Also ,we have Cisco Moderators on CSC so might be one of them notice this thing and can probably take this further with the correct Team.

Also, in case you happen to go in one of the Partner Summit or any other Cisco event feel free to raise it from your side as well.

Regards

Deepak

[voipeee]

Hi @Deepak Rawat,

Your solution worked for me without any issues, thank you so much!

Thanks,

Muk