ASA 5555-X with SW - error messages - cmgr_kvm_sw_mod_idp_req_thread, Failed

[nilambhate]

CMGR PLAT: In sw_mod_idprom_resp_handler Failed to find idp resp PID for slot 1

CMGR VM: In cmgr_kvm_sw_mod_idp_req_thread, Failed to retrieve IDPROM data from software module 1

This problem has rendered 3 of our ASA5555x out of service.

Please help

thanks

Nilam

[Aditya Ganjoo]

Hi,

Are you using IPS module on the ASA ?

Can you share the show module of the ASA ?

Also check this bug and see if it matches your issue:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCul58230/?reffering_site=dumpcr

Regards,

Aditya

Please rate helpful posts and mark correct answers.

[nilambhate]

Hello Aditya,

below is the Show Module output

ciscoasa# show module

Mod  Card Type                                    Model              Serial No.
---- -------------------------------------------- ------------------ -----------
   0 ASA 5555-X with SW, 8 GE Data, 1 GE Mgmt     ASA5555            FCH16307KEU
 ips Unknown                                      N/A                FCH16307KEU
cxsc Unknown                                      N/A                FCH16307KEU

Mod  MAC Address Range                 Hw Version   Fw Version   Sw Version    
---- --------------------------------- ------------ ------------ ---------------
   0 30f7.0d47.cb8a to 30f7.0d47.cb93  1.0          2.1(9)8      9.1(2)
 ips 30f7.0d47.cb88 to 30f7.0d47.cb88  N/A          N/A         
cxsc 30f7.0d47.cb88 to 30f7.0d47.cb88  N/A          N/A         

Mod  SSM Application Name           Status           SSM Application Version
---- ------------------------------ ---------------- --------------------------
cxsc Unknown                        No Image Present Not Applicable

Mod  Status             Data Plane Status     Compatibility
---- ------------------ --------------------- -------------
   0 Up Sys             Not Applicable       
 ips Init               Not Applicable       
cxsc Unresponsive       Not Applicable       

Mod  License Name   License Status  Time Remaining
---- -------------- --------------- ---------------
 ips IPS Module     Enabled         perpetual    

As you can see from the above output, it does look similar

please advise further

thanks

Nilam

[Aditya Ganjoo]

Hi Nilam,

Yes the symptoms match the bug.

Are we using IPS on the ASA ?

I see IPS stuck in init state.

Checking the status you provided I think we need to start with trying to reset the IPS module from the ASA:

Please issue the following command in the ASA CLI:

asa# hw-module module 1 reset

If it comes up then I would suggest to upgrade the IPS to the recommended versions in the bug.

Regards,

Aditya

Please rate helpful posts and mark correct answers.

[nilambhate]

Where can I download the appropriate software, and what are the steps to install it.

I saw that bug page gave downloads but they were for 4200 series and I have a 5555-x device.

Please advise

thanks

Nilam

[nilambhate]

Hello Aditya,

Can you let me know where I can find the correct Patch to download as the ones I see on the bug search page are all related to 4200 Series where as I need it for 5555-x

Also is there any instructions on how to install the patch once I have the right software ?

[Aditya Ganjoo]

Hi,

You can use the same image for the same.

You can also use this link for more info:

http://www.cisco.com/c/en/us/td/docs/security/ips/7-1/configuration/guide/cli/cliguide71/cli_system_images.html#wp1397646

Regards,

Aditya

Please rate helpful posts and mark correct answers.