Cisco ASA 5545 Boot Image Priority

[kasunrajapakse]

Hi All,

One quick question. 

Let's say we boot 2 images on the boot system like the following

vpnb# sh run boot
boot system disk0:/asa943-smp-k8.bin
boot system disk0:/asa941-smp-k8.bin
vpnb#

If the first image fails/or if it's corrupted while booting the device, will the ASA router pick the second image and boot correctly?

Thanks

[Cristian Matei · Accepted solution]

Hi,

  ASA will try the second specified image only if the first image is unavailable, not if it’s corrupted.

Regards,

Cristian Matei.

[kasunrajapakse]

Hi Cristian, 

Thanks alot for the quick reply. 

Is there anyway we can to make sure that the image I set on top (on boot priority) is not corrupted and all good?

Like a hash check?

vpnb# show disk0: all | inc Feb 26
104 84805632 Feb 26 2020 16:20:30 asa963-1-smp-k8.bin
105 26709020 Feb 26 2020 16:23:56 asdm-771.bin
vpnb# 

I want to upgrade to "asa963-1-smp-k8.bin" which is currently sitting on disk0. But I just want to have a plan B before I set this new image as a boot image and perform a reload. 
Any advice?

Thanks

[Cristian Matei]

Hi,

   Yes there is, use the "verify /md5" and "verify /sha-512" commands to verify that the MD5/SHA hash is valid. Use this document for further reference.

Regards,

Cristian Matei.

[kasunrajapakse]

cheers!