FirePOWER Management center version error

[MKH]

Hello

We have 2 ASA5515X.We have installed Cisco FirePOWER Management center 6.1.0 (build 330) .We have activated the license for FirePOWER Management center.
ASA5515X Firepowers image version is asasfr-boot-6.2.0 and we can't add them to the FirePOWER Management center.
Is there a solution for this problem?

Thank you.

[Marvin Rhoads · Accepted solution]

A FirePOWER Management Center needs to be at or above the version of any registered devices. Additionally, FMC 6.2 can only manage devices that are at 6.1 or higher.

If you upgrade your FMC to release 6.2, you should be able to add the release 6.2 devices. 

Reference:

http://www.cisco.com/c/en/us/td/docs/security/firepower/620/relnotes/Firepower_System_Release_Notes_Version_620/management_capability.html

[MKH]

But we have activated the license (FS-VMW-10-SW-K9) for FMC 6.1. Can we use the activated license for FMC 6.2? 

Thank you.

[Marvin Rhoads · Accepted solution]

Yes you can. Upgrading to the current release does not affect the licensing.

If you have the associated support contract (CON-ECMU-VMWSW10) your CCO id should have the entitlement to download all version updates, both minor and major.

6.1 to 6.2 is considered a major release so it will not show up in FMC when you check for upgrades. You need to first download it from the Cisco portal (link below) and then upload it onto your FMC using the button on the System > Updates page.

Portal link for FMC software:

https://software.cisco.com/download/release.html?mdfid=286259687&softwareid=286271056&release=Rules%20Updates&relind=AVAILABLE&rellifecycle=&reltype=latest

You need this file:

Sourcefire_3D_Defense_Center_S3_Upgrade-6.2.0-362.sh

[MKH]

Does upgrading to FMC 6.2 (Sourcefire_3D_Defense_Center_S3_Upgrade-6.2.0-362.sh) cover the Hotfix and patches for FMC 6.1?

Do I have to install the hotfix and patches before upgrading to FMC 6.2?

Do I need another file for upgrading?

Thank you.

[Marvin Rhoads]

I haven't done a bug-by-bug check to verify the 6.1 caveats are all resolved in 6.2; but 6.2 was released slightly after the latest patch for 6.1. It is the Cisco-recommended most stable release with the fewest unresolved caveats (aka bugs).

You do not have to install the 6.1 hotfix and patches - the 6.2 upgrade file will suffice on top of a base 6.1 installation.