ā09-15-2017 06:55 AM - edited ā02-21-2020 06:18 AM
Hi all -
I have an ASA 5515 sensor running software v5.4.0 (build 763). On my Defense Center (which is running 5.4.1), I tried to push out a sensor update to version 5.4.0.11 without first reading the release notes. Naturally, I got this error:
"Fatal error: This patch is for IMS versions greater than or equal to 5.4.0.5 and less than 5.4.0.10."
No worries, I read the release notes and decided I would go to 5.4.0.3 first. So, I tried to push that out and I get this message:
"Fatal error: Update to version 5.4.0.11 is not complete. Please complete update to 5.4.0.11"
I've rebooted the sensor to no avail. Short of reimaging, how else can I purge the update to 5.4.0.11 so I can instead get the upgrade to 5.4.0.3 to start?
Any help is much appreciated!
ā12-13-2017 12:17 AM
Hi,
have you found any solution ?
I have the same problem. I can't patch from 5.4.0.3 to 5.4.0.4 after unsuccessful try to update to 5.4.0.11 .
Any other idea than recovery ?
Regards
Roman
ā12-13-2017 09:40 AM - edited ā12-13-2017 09:42 AM
Hi,
If you are doing an upgrade and it fails do not reboot the devices contact Cisco TAC.
Have seen this problem multiple times and sometimes it ends up with a corrupted DB and then you need to re-install everything from backup.
Contact Cisco TAC and see if they can help you.
br, Micke
P.S. I have learnt the hard way to read Firepower release notes very carefully, as it's not like in good old days just to install a new version.
ā12-13-2017 09:57 AM
No, I was not able to solve the problem. I ended up reimaging the sensor.
ā02-12-2018 05:25 AM
Anyone solved the problem ?
Is possible to solve the issue without re-image the module ?
ā03-01-2018 12:45 AM
Hi Rafaella,
it seams re-imaging is the only solution.
Regards
Roman
ā03-01-2018 05:25 AM
Hello Team,
I had a couple of customer that had the similar error. I tried everything, from the earlier update, editing a couple of database entries and more, but at the end the only resolution was a reimage.
As someone mentioned, do not reboot, open a P1 or P2 SR.
If you do need to reimage, ensure to get a screenshot of all your device settings, so it makes the reimage/reconfiguration easier.
ā03-20-2018 03:48 AM
Delete the upgrade lock file
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvh53425/?rfs=iqvred
its the .update_version_lock_file
ā02-28-2019 06:34 AM
Can you tell us the correct path for the .update_version_lock_file ?
ā02-28-2019 08:29 AM
It should be in /var/log/sf/
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide