- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-29-2005 05:55 AM - edited 03-10-2019 01:40 AM
Hi. One of our six IDS sensors recently stopped accepting signature updates. The error I'm receiving after attempting an update is:
"Sensor <IDS-Sensor-Name>: Signature Update Process
An error occurred while running the update script on the sensor named <IDS-Sensor-Name>.
Detail = An error occurred at the sensor during the update, sensor message = idsPackageMgr: digital signature of the update file was not valid, use CCO to replace corrupted file"
I've tried replacing the corrupted file, no luck. I've also tried updating this sensor in every possible way (IDSMC, CLI, Auto Update, and manually through the web gui), using several differnt signature versions.
Finally, I downgraded the sensor from S190 to S189. Now I can't even re-apply the same S190 update that I orriginally did, I get the same error.
Is there a way to reset the mechanisim that is checking the digital signature on the sensor? Is there anything else I can do?
Any input would be appreciated!
Solved! Go to Solution.
- Labels:
-
IPS and IDS
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-29-2005 10:51 AM
I'm assuming you're using a 4.x sensor
Try this:
1. Download S192 from http://www.cisco.com/cgi-bin/tablebuild.pl/ids4-sigup
2. Install the sigupdate via CLI
3. Re-import the sensor in IPS MC
Or you can try deleting the sensor from MC, then re-importing it, then applying the S192 sigupdate.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-29-2005 10:51 AM
I'm assuming you're using a 4.x sensor
Try this:
1. Download S192 from http://www.cisco.com/cgi-bin/tablebuild.pl/ids4-sigup
2. Install the sigupdate via CLI
3. Re-import the sensor in IPS MC
Or you can try deleting the sensor from MC, then re-importing it, then applying the S192 sigupdate.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-29-2005 11:28 AM
This worked... thank you for your help.
