Firepower 1120 stuck in boot and factory reset

[MartinTG]

Hi.

We have an 1120 that just blinks green in the status LED.

So I've connected to the CLI via USB and can see it stops at "Creating FXOS swap file..." when booting from itself. But also if I try to boot with a new image on a USB.
When I try to factory reset it begins the installation but hangs forever on "Executing S09database-init".

I can't see where to go from here as I can't get to the login part to reinstall an image. So has anyone tried something similar and solved it?

Booting up the 1120 on itself and via a USB hangs here:

Factory Reset hangs forever here:

[balaji.bandi]

If still having issue, i will re-image and try different USB stick or TFTP

https://www.cisco.com/c/en/us/support/docs/security/firepower-1000-series/220642-reimage-a-secure-firewall-threat-defense.html

[MartinTG]

I tried re-imaging it via TFTP, but it still hangs on "Creating FXOS swap file...".

[balaji.bandi]

Do you have any idea before what version running :

Make sure you meet the ROMMON for the latest version :

https://www.cisco.com/c/en/us/td/docs/security/firepower/2100/troubleshoot_fxos/b_2100_CLI_Troubleshoot/b_2100_CLI_Troubleshoot_chapter_011.html#task_fv1_hv1_hbb

check the upgrade path :

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/release-notes/threat-defense/720/threat-defense-release-notes-72.html#new-features-fmc-728

[Sheraz.Salim]

I had a similar issue with FTD 2140 when open case with TAC they mentioned there is a filed noticed issued and raise RMA for us. even though it was not relevent issue but we having the same issue as your having.

Notice

THIS FIELD NOTICE IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTY OF MERCHANTABILITY. YOUR USE OF THE INFORMATION ON THE FIELD NOTICE OR MATERIALS LINKED FROM THE FIELD NOTICE IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS FIELD NOTICE AT ANY TIME.

FN70457 - Firepower 1000 Series Security Appliances - Some Units Shipped with an Incomplete Installation of Firepower Software - Workaround Provided

External Hardware Field Notice

Field Notice Contact :

fn70457-info@cisco.com

Revision History       Revision Publish Date Comment 1.2 30-Apr-21 Updated the Serial Number Validation Section and Added the How to Identify Affected Products Section 1.1 09-Oct-19 Changed "ASA" to "Firepower" in SNV Section 1.0 07-Oct-19 Initial Release

Products Affected     Affected Product ID Product Description Affected TAN Affected VID Comment FPR1010-NGFW-K9 Cisco Firepower 1010 NGFW Appliance, Desktop 68-6191-05 V01   FPR1120-NGFW-K9 Cisco Firepower 1120 NGFW Appliance, 1U 68-6431-02 V01   FPR1140-NGFW-K9 Cisco Firepower 1140 NGFW Appliance, 1U 68-6432-02 V01

Defect Information
		Defect ID Headline CSCvr55912 Erase config command removes FTD installation on WM

[MartinTG]

Thanks for your suggestion.
I also found that issue and checked our Firepower S/N which showed up as "Not Affected.
I did however try to delete the configuration as they proposed.
But the reinstallation still failed on "Executing S09database-init" unfortunately.

[MartinTG]

Update.

I swapped the disk from another 1120 and that booted up perfectly.

I then checked the disk and by the looks of the metal around the data connector, it seems like it has overheated.

So I'm going to buy a new SSD and will try to re-image that one and hopefully that works.

[Sheraz.Salim]

Are your appliances not covered by Cisco support? If they are covered, you can submit an RMA, and it will be delivered within four hours. Please note that using non-Cisco hardware may void your Cisco firewall warranty and could affect your support options from Cisco

[MartinTG]

You're right and I know, but our service contract on that 1120 ran out last year.
I'm currently working on getting that renewed and that way submit an RMA on it.

So if that's possible then all is good and we get it via Cisco.

If not, then I just buy a new third-party SSD and we will live with that.