ASAv 9.16 install in KVM stops abruptly

[NY45684]

Hi,

I am trying to install ASAv 9.16 in KVM environment but the install stops after "update-rc.d". Anything i am missing here?

i used day0 config file and idtoken to generate day0.iso file. 

my day0-config file:

ASA Version 9.16.1
!
interface management0/0
nameif management
security-level 100
ip address 10.150.100.3 255.255.255.0
no shutdown
username AdminUser password paSSw0rd
ssh 10.150.100.0 255.255.255.0 management
aaa authentication ssh console LOCAL

install logs - attached

Appreciate your help.

[Chakshu Piplani]

Day0 file is optional "If you deploy without a Day 0 configuration file, you must configure Firepower System-required settings after launch"

https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/kvm/ftdv-kvm-gsg/ftdv-kvm-deploy.html#id_79314

Have you tested this without a day0 config file?

Regards,

Chakshu

Do rate helpful posts!

[NY45684]

Thanks for the reply, i was following the below link to install ASAv 9.16 firewall in KVM

https://www.cisco.com/c/en/us/td/docs/security/asa/asa910/asav/quick-start-book/asav-910-qsg/asav_kvm.html

Should i need to install FTDv before i attempt to install ASAv?

Niranjan

[Milos_Jovanovic]

Hi @NY45684,

ASAv and FTDv are two different products, and they are not dependant one from another. If you want to use it then you can install it, but it is not required for ASAv to run.

BR,

Milos

[NY45684]

@Milos_Jovanovic  thanks for your clarification. 
my ASAv install with day0.iso doesn't go past update-rc.d, am i missing anything?

[Milos_Jovanovic]

I don't have experience with KVM environment, so I'm not of much help here.

Reading Getting Started Guide, yur configuration doesn't differ much from an example used there. I would try with an approach to remove as much lines from Day0 as possible, and re-adding them back later, untill I realiye what exactly is causing this behavior. I would start with very minumum like ASA version, and try again. Also, I would check file permissions, to see if it is related somehow.

BR,

Milos

[NY45684]

@Milos_Jovanovic  no change even with just ASA Version. 

[Milos_Jovanovic]

Since you can't proceed with this on your own, next logical step is to reach back to TAC for assistance.

BR,

Milos

[NY45684]

Hi,

I solved it finally. Installed with just qcow2 file without day0 config or idtoken. I didn't get struck in the middle this time (i suppose that was due to with either day0 config or day0.iso generation) and after the install, registered the product with generated token (from cisco website) via "license smart register idtoken xxxxxxxxxxxxxx " command. 

Thanks for all your support.

show license summary

Smart Licensing is ENABLED

Registration:
Status: REGISTERED
Smart Account: xxxxxxxxx
Virtual Account: DEFAULT
Export-Controlled Functionality: ALLOWED
Last Renewal Attempt: None
Next Renewal Attempt: Mar 12 2022 15:45:35 UTC

License Authorization:
Status: AUTHORIZED
Last Communication Attempt: SUCCEEDED
Next Communication Attempt: Oct 13 2021 15:45:44 UTC

License Usage:
License Entitlement tag Count Status
-----------------------------------------------------------------------------
ASAv10 Standard - 1G (ASAv-STD-1G) 1 AUTHORIZED