Firewall update error - user: 'admin' cannot be created, name is user.

[mpaulin]

Hi,

I attempted to update a Cisco Firepower 2110 Threat Defense firewall to v7.4.3 from 7.4.2.2. It passed the readiness check but then errored during the upgrade and rolled back. It provided the error below in the log:

user: 'admin' cannot be created, name is used by another user. /var/cisco/deploy/upgrade_success file is created at 800_post/901_reapply_sensor_policy.pl line 219. model_number 77 model_id a at 800_post/901_reapply_sensor_policy.pl line 229. fatal error: triggering full deploy of device failed.

Is there a fix for this? I haven't seen any known bugs with fixes for this issue so any help would be much appreciated.

Thanks

[nspasov]

You might be hitting CSCwm69907. Do you have external authentication configured (e.g., RADIUS or LDAP)?

Thank you for rating helpful posts!

[nspasov]

Thank you for rating helpful posts!

[mpaulin]

@nspasov Thank you. That does seem to be the bug we are hitting. The upgrade to the fixed version isn't working so will need to delete either the local admin user or radius admin user. I wasn't aware we used a radius admin user. Is it possible to delete the local admin user from a FMC managed firewall or easiest to delete the radius admin user?

[mpaulin · Accepted solution]

I have managed to upgrade the firewall successfully. I temporarily disabled External Authentication via the platform settings which allowed the upgrade to complete without erroring.

@nspasov Thanks for your help!

[nspasov]

My pleasure! I am glad your issue was resolved and thank you for taking the time to come back and update the thread/community. Since the issue is resolved, please mark the thread as answered

Thank you for rating helpful posts!

[nspasov]

Thank you for rating helpful posts!