Problem installing Firepower software on ASA

[moha99edhamedan]

I have ab ASA 5508-X out of the box  with Firepower services  running ASA 9.16(3) ASDM 7.19(1) 
I've been trying to recover the SFR module v7.0.4-55 after I copied the SFR image from my FTP server and tried to recover with the new image the recover start and got stuck in the middle of the recovery process after 10 minute the session appears to  be inactive 

If I do a "show module sfr" from the ASA it shows that it is in recover state

[balaji.bandi]

The output does not much helpful  here :

Is this part of HA ? have tried an older version to recover?

can you post the full log :

#show module sfr log console

[moha99edhamedan]

Thank you for your reply,
it is not a part of HA 
I have not tried an older version 

W-ASA# show module sfr log console

Displaying Console Log Information for Module sfr:

***
*** EVENT: The module is shut down.
*** TIME: 10:57:12 UTC Jan 7 2023
***

***
*** EVENT: Creating the Disk Image...
*** TIME: 11:00:08 UTC Jan 7 2023
***

***
*** EVENT: The module is being recovered.
*** TIME: 11:00:08 UTC Jan 7 2023
***

***
*** EVENT: Disk Image created successfully.
*** TIME: 11:01:41 UTC Jan 7 2023
***

***
*** EVENT: Start Parameters: Image: /mnt/disk0/vm/vm_1.img, ISO: -cdrom /mnt/disk0/asasfr-5500x-boot-7.0.4-55.img, Num CPUs: 6, RAM: 3483MB, Mgmt MAC: 00:2C:C8:49:E9:86, CP MAC: 00:00:00:02:00:01, HDD: -drive file=/dev/sda,cache=none,if=virtio, Dev

***
*** EVENT: Start Parameters Continued: RegEx Shared Mem: 0MB, Cmd Op: r, Shared Mem Key: 8061, Shared Mem Size: 16, Log Pipe: /dev/ttyS0_vm1, Sock: /dev/ttyS1_vm1, Mem-Path: -mem-path /hugepages
*** TIME: 11:01:42 UTC Jan 7 2023
***

(process:7393): GLib-WARNING **: 11:01:46.212: ../glib-2.60.4/glib/gmem.c:490: custom memory allocation vtable not supported
WARNING: Image format was not specified for '/mnt/disk0/vm/vm_1.img' and probing guessed raw.
Automatically detecting the format is dangerous for raw images, write operations on block 0 will be restricted.
Specify the 'raw' format explicitly to remove the restrictions.
WARNING: Image format was not specified for '/dev/sda' and probing guessed raw.
Automatically detecting the format is dangerous for raw images, write operations on block 0 will be restricted.
Specify the 'raw' format explicitly to remove the restrictions.
WARNING: Image format was not specified for '/mnt/disk0/.private/meta_vm_data' and probing guessed raw.
Automatically detecting the format is dangerous for raw images, write operations on block 0 will be restricted.
Specify the 'raw' format explicitly to remove the restrictions.
Status: Mapping host 0x7f54f9200000 to VM with size 16777216
Warning: vlan 0 is not connected to host network

ISOLINUX 2.10 2004-06-18 Copyright (C) 1994-2004 H. Peter Anvin

Cisco SFR-BOOT-IMAGE and CX-BOOT-IMAGE for SFR - 7.0.0

(WARNING: ALL DATA ON DISK 1 WILL BE LOST)

Loading bzImage...................................................................................................
Loading install.img........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
Ready.
[ 0.000000] Linux version 4.18.45-yocto-standard (oe-user@oe-host) (gcc version 8.2.0 (GCC)) #1 SMP PREEMPT Thu Jul 21 06:32:14 UTC 2022
[ 0.000000] Command line: initrd=install.img console=ttyS0,9600 root=/dev/ram BOOT_IMAGE=bzImage
[ 0.000000] x86/fpu: x87 FPU will use FXSAVE
[ 0.000000] BIOS-provided physical RAM map:
[ 0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable
[ 0.000000] BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved
[ 0.000000] BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved
[ 0.000000] BIOS-e820: [mem 0x0000000000100000-0x00000000d9adefff] usable
[ 0.000000] BIOS-e820: [mem 0x00000000d9adf000-0x00000000d9afffff] reserved
[ 0.000000] BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved
[ 0.000000] BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved
[ 0.000000] NX (Execute Disable) protection: active
[ 0.000000] SMBIOS 2.8 present.
[ 0.000000] DMI: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.8.2-0-g33fbe13 by qemu-project.org 04/01/2014
[ 0.000000] Hypervisor detected: KVM
[ 0.000000] last_pfn = 0xd9adf max_arch_pfn = 0x400000000
[ 0.000000] x86/PAT: PAT not supported by CPU.
[ 0.000000] x86/PAT: Configuration [0-7]: WB WT UC- UC WB WT UC- UC
[ 0.000000] found SMP MP-table at [mem 0x000f6430-0x000f643f]
[ 0.000000] RAMDISK: [mem 0x7b3a0000-0x7fffbfff]
[ 0.000000] ACPI: Early table checksum verification disabled
[ 0.000000] ACPI: RSDP 0x00000000000F63E0 000014 (v00 BOCHS )
[ 0.000000] ACPI: RSDT 0x00000000D9AE1532 000034 (v01 BOCHS BXPCRSDT 00000001 BXPC 00000001)
[ 0.000000] ACPI: FACP 0x00000000D9AE08DA 000074 (v01 BOCHS BXPCFACP 00000001 BXPC 00000001)
[ 0.000000] ACPI: DSDT 0x00000000D9ADFD40 000B9A (v01 BOCHS BXPCDSDT 00000001 BXPC 00000001)
[ 0.000000] ACPI: FACS 0x00000000D9ADFD00 000040
[ 0.000000] ACPI: SSDT 0x00000000D9AE094E 000B0C (v01 BOCHS BXPCSSDT 00000001 BXPC 00000001)
[ 0.000000] ACPI: APIC 0x00000000D9AE145A 0000A0 (v01 BOCHS BXPCAPIC 00000001 BXPC 00000001)
[ 0.000000] ACPI: HPET 0x00000000D9AE14FA 000038 (v01 BOCHS BXPCHPET 00000001 BXPC 00000001)
[ 0.000000] No NUMA configuration found
[ 0.000000] Faking a node at [mem 0x0000000000000000-0x00000000d9adefff]
[ 0.000000] NODE_DATA(0) allocated [mem 0xd9adb000-0xd9adefff]
[ 0.000000] kvm-clock: cpu 0, msr 0:d9ad9001, primary cpu clock
[ 0.000000] kvm-clock: Using msrs 4b564d01 and 4b564d00
[ 0.000000] kvm-clock: using sched offset of 20146406010 cycles
[ 0.000000] clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns
[ 0.000000] Zone ranges:
[ 0.000000] DMA [mem 0x0000000000001000-0x0000000000ffffff]
[ 0.000000] DMA32 [mem 0x0000000001000000-0x00000000d9adefff]
[ 0.000000] Normal empty
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0x0000000000001000-0x000000000009efff]
[ 0.000000] node 0: [mem 0x0000000000100000-0x00000000d9adefff]
[ 0.000000] Reserved but unavailable: 98 pages
[ 0.000000] Initmem setup node 0 [mem 0x0000000000001000-0x00000000d9adefff]
[ 0.000000] ACPI: PM-Timer IO Port: 0x608
[ 0.000000] ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1])
[ 0.000000] IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23
[ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl)
[ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level)
[ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level)
[ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level)
[ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level)
[ 0.000000] Using ACPI (MADT) for SMP configuration information
[ 0.000000] ACPI: HPET id: 0x8086a201 base: 0xfed00000
[ 0.000000] smpboot: Allowing 6 CPUs, 0 hotplug CPUs
[ 0.000000] [mem 0xd9b00000-0xfeffbfff] available for PCI devices
[ 0.000000] Booting paravirtualized kernel on KVM
[ 0.000000] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns
[ 0.000000] random: get_random_bytes called from start_kernel+0x8e/0x44c with crng_init=0
[ 0.000000] setup_percpu: NR_CPUS:64 nr_cpumask_bits:64 nr_cpu_ids:6 nr_node_ids:1
[ 0.000000] percpu: Embedded 43 pages/cpu s138520 r8192 d29416 u262144
[ 0.000000] KVM setup async PF for cpu 0
[ 0.000000] kvm-stealtime: cpu 0, msr d9616000
[ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 877564
[ 0.000000] Policy zone: DMA32
[ 0.000000] Kernel command line: initrd=install.img console=ttyS0,9600 root=/dev/ram BOOT_IMAGE=bzImage
[ 0.000000] Memory: 3407860K/3566068K available (10252K kernel code, 627K rwdata, 2436K rodata, 1060K init, 400K bss, 158208K reserved, 0K cma-reserved)
[ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=6, Nodes=1
[ 0.001000] Preemptible hierarchical RCU implementation.
[ 0.001000] RCU restricting CPUs from NR_CPUS=64 to nr_cpu_ids=6.
[ 0.001000] Tasks RCU enabled.
[ 0.001000] RCU: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=6
[ 0.001000] NR_IRQS: 4352, nr_irqs: 472, preallocated irqs: 16
[ 0.001000] Console: colour VGA+ 80x25
[ 0.001000] console [ttyS0] enabled
[ 0.001000] ACPI: Core revision 20180531
[ 0.001000] clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns
[ 0.001022] APIC: Switch to symmetric I/O mode setup
[ 0.005000] ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1
[ 0.005000] tsc: Detected 2000.080 MHz processor
[ 0.005005] clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x1cd479fdd45, max_idle_ns: 440795300000 ns
[ 0.006007] Calibrating delay loop (skipped) preset value.. 4000.16 BogoMIPS (lpj=2000080)
[ 0.007005] pid_max: default: 32768 minimum: 301
[ 0.010073] Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes)
[ 0.012066] Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes)
[ 0.013063] Mount-cache hash table entries: 8192 (order: 4, 65536 bytes)
[ 0.014025] Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes)
[ 0.016139] Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0
[ 0.017006] Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0
[ 0.018006] Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization
[ 0.019019] Spectre V2 : Spectre mitigation: kernel not compiled with retpoline; no mitigation available!
[ 0.019022] Speculative Store Bypass: Vulnerable
[ 0.021006] MDS: Vulnerable: Clear CPU buffers attempted, no microcode
[ 0.022264] Freeing SMP alternatives memory: 36K
[ 0.025000] smpboot: CPU0: Intel QEMU Virtual CPU version 2.4.0 (family: 0x6, model: 0x6, stepping: 0x3)
[ 0.031021] Performance Events: PMU not available due to virtualization, using software events only.
[ 0.035009] Hierarchical SRCU implementation.
[ 0.040008] smp: Bringing up secondary CPUs ...
[ 0.049053] x86: Booting SMP configuration:
[ 0.050008] .... node #0, CPUs: #1
[ 0.001000] kvm-clock: cpu 1, msr 0:d9ad9041, secondary cpu clock
[ 0.001000] smpboot: CPU 1 Converting physical 0 to logical die 1
[ 0.056042] KVM setup async PF for cpu 1
[ 0.057000] kvm-stealtime: cpu 1, msr d9656000
[ 0.067041] #2
[ 0.001000] kvm-clock: cpu 2, msr 0:d9ad9081, secondary cpu clock
[ 0.001000] smpboot: CPU 2 Converting physical 0 to logical die 2
[ 0.073058] KVM setup async PF for cpu 2
[ 0.074000] kvm-stealtime: cpu 2, msr d9696000
[ 0.083041] #3
[ 0.001000] kvm-clock: cpu 3, msr 0:d9ad90c1, secondary cpu clock
[ 0.001000] smpboot: CPU 3 Converting physical 0 to logical die 3
[ 0.088047] KVM setup async PF for cpu 3
[ 0.089000] kvm-stealtime: cpu 3, msr d96d6000
[ 0.099042] #4
[ 0.001000] kvm-clock: cpu 4, msr 0:d9ad9101, secondary cpu clock
[ 0.001000] smpboot: CPU 4 Converting physical 0 to logical die 4
[ 0.104057] KVM setup async PF for cpu 4
[ 0.105000] kvm-stealtime: cpu 4, msr d9716000
[ 0.115041] #5
[ 0.001000] kvm-clock: cpu 5, msr 0:d9ad9141, secondary cpu clock
[ 0.001000] smpboot: CPU 5 Converting physical 0 to logical die 5
[ 0.120048] KVM setup async PF for cpu 5
[ 0.121000] kvm-stealtime: cpu 5, msr d9756000
[ 0.123020] smp: Brought up 1 node, 6 CPUs
[ 0.124016] smpboot: Max logical packages: 6
[ 0.125008] smpboot: Total of 6 processors activated (24000.96 BogoMIPS)
[ 0.128141] devtmpfs: initialized
[ 0.130037] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns
[ 0.131024] futex hash table entries: 2048 (order: 5, 131072 bytes)
[ 0.133239] xor: measuring software checksum speed
[ 0.144005] prefetch64-sse: 7864.000 MB/sec
[ 0.155005] generic_sse: 6968.000 MB/sec
[ 0.156005] xor: using function: prefetch64-sse (7864.000 MB/sec)
[ 0.157365] NET: Registered protocol family 16
[ 0.159686] audit: initializing netlink subsys (disabled)
[ 0.160118] audit: type=2000 audit(1673089326.911:1): state=initialized audit_enabled=0 res=1
[ 0.163014] cpuidle: using governor ladder
[ 0.164026] cpuidle: using governor menu
[ 0.165102] ACPI: bus type PCI registered
[ 0.166243] PCI: Using configuration type 1 for base access
[ 0.171404] HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages
[ 0.190013] raid6: sse2x1 gen() 597 MB/s
[ 0.208010] raid6: sse2x1 xor() 2019 MB/s
[ 0.226032] raid6: sse2x2 gen() 1210 MB/s
[ 0.244011] raid6: sse2x2 xor() 2398 MB/s
[ 0.262024] raid6: sse2x4 gen() 2000 MB/s
[ 0.280017] raid6: sse2x4 xor() 2162 MB/s
[ 0.281006] raid6: using algorithm sse2x4 gen() 2000 MB/s
[ 0.282005] raid6: .... xor() 2162 MB/s, rmw enabled
[ 0.283005] raid6: using intx1 recovery algorithm
[ 0.285218] ACPI: Added _OSI(Module Device)
[ 0.286005] ACPI: Added _OSI(Processor Device)
[ 0.287005] ACPI: Added _OSI(3.0 _SCP Extensions)
[ 0.288005] ACPI: Added _OSI(Processor Aggregator Device)
[ 0.289006] ACPI: Added _OSI(Linux-Dell-Video)
[ 0.292127] ACPI: 2 ACPI AML tables successfully acquired and loaded
[ 0.295471] ACPI: Interpreter enabled
[ 0.296016] ACPI: (supports S0 S5)
[ 0.297006] ACPI: Using IOAPIC for interrupt routing
[ 0.298032] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug
[ 0.300447] ACPI: Enabled 16 GPEs in block 00 to 0F
[ 0.308486] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff])
[ 0.309013] acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI]
[ 0.310015] acpi PNP0A03:00: _OSC failed (AE_NOT_FOUND); disabling ASPM
[ 0.311020] acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge.
[ 0.312080] PCI host bridge to bus 0000:00
[ 0.313008] pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window]
[ 0.314007] pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window]
[ 0.315007] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window]
[ 0.316008] pci_bus 0000:00: root bus resource [mem 0xd9b00000-0xfebfffff window]
[ 0.317008] pci_bus 0000:00: root bus resource [bus 00-ff]
[ 0.334070] pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7]
[ 0.335007] pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6]
[ 0.336007] pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177]
[ 0.337013] pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376]
[ 0.339928] pci 0000:00:01.3: quirk: [io 0x0600-0x063f] claimed by PIIX4 ACPI
[ 0.340029] pci 0000:00:01.3: quirk: [io 0x0700-0x070f] claimed by PIIX4 SMB
[ 0.447350] ACPI: PCI Interrupt Link [LNKA] (IRQs 5 *10 11)
[ 0.448249] ACPI: PCI Interrupt Link [LNKB] (IRQs 5 *10 11)
[ 0.450237] ACPI: PCI Interrupt Link [LNKC] (IRQs 5 10 *11)
[ 0.452158] ACPI: PCI Interrupt Link [LNKD] (IRQs 5 10 *11)
[ 0.454006] ACPI: PCI Interrupt Link [LNKS] (IRQs *9)
[ 0.456706] pci 0000:00:02.0: vgaarb: setting as boot VGA device
[ 0.457000] pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[ 0.457009] pci 0000:00:02.0: vgaarb: bridge control possible
[ 0.458005] vgaarb: loaded
[ 0.459131] SCSI subsystem initialized
[ 0.460206] ACPI: bus type USB registered
[ 0.461040] usbcore: registered new interface driver usbfs
[ 0.462022] usbcore: registered new interface driver hub
[ 0.464106] usbcore: registered new device driver usb
[ 0.466098] PCI: Using ACPI for IRQ routing
[ 0.468186] HPET: 3 timers in total, 0 timers will be used for per-cpu timer
[ 0.469055] hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0
[ 0.470006] hpet0: 3 comparators, 64-bit 100.000000 MHz counter
[ 0.481158] clocksource: Switched to clocksource kvm-clock
[ 0.482892] pnp: PnP ACPI init
[ 0.484963] pnp: PnP ACPI: found 7 devices
[ 0.503393] clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns
[ 0.506224] NET: Registered protocol family 2
[ 0.507750] IP idents hash table entries: 65536 (order: 7, 524288 bytes)
[ 0.510877] tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes)
[ 0.513339] TCP established hash table entries: 32768 (order: 6, 262144 bytes)
[ 0.515673] TCP bind hash table entries: 32768 (order: 7, 524288 bytes)
[ 0.517845] TCP: Hash tables configured (established 32768 bind 32768)
[ 0.519929] UDP hash table entries: 2048 (order: 4, 65536 bytes)
[ 0.521807] UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes)
[ 0.523871] NET: Registered protocol family 1
[ 0.525873] RPC: Registered named UNIX socket transport module.
[ 0.527671] RPC: Registered udp transport module.
[ 0.529095] RPC: Registered tcp transport module.
[ 0.530520] RPC: Registered tcp NFSv4.1 backchannel transport module.
[ 0.532462] pci 0000:00:00.0: Limiting direct PCI/PCI transfers
[ 0.534269] pci 0000:00:01.0: PIIX3: Enabling Passive Release
[ 0.536067] pci 0000:00:01.0: Activating ISA DMA hang workarounds
[ 0.538039] pci 0000:00:02.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[ 0.540722] Trying to unpack rootfs image as initramfs...
[ 3.373540] Freeing initrd memory: 78192K
[ 3.374998] clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x1cd479fdd45, max_idle_ns: 440795300000 ns
[ 3.380305] Initialise system trusted keyrings
[ 3.382056] workingset: timestamp_bits=40 max_order=20 bucket_order=0
[ 3.387724] NFS: Registering the id_resolver key type
[ 3.389326] Key type id_resolver registered
[ 3.390622] Key type id_legacy registered
[ 3.395238] async_tx: api initialized (async)
[ 3.396602] Key type asymmetric registered
[ 3.397871] Asymmetric key parser 'x509' registered
[ 3.399424] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 252)
[ 3.401660] io scheduler noop registered
[ 3.402875] io scheduler deadline registered
[ 3.404240] io scheduler cfq registered (default)
[ 3.405705] io scheduler mq-deadline registered
[ 3.407096] io scheduler kyber registered
[ 3.409113] ipmi message handler version 39.2
[ 3.410564] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input0
[ 3.412839] ACPI: Power Button [PWRF]
[ 3.467912] PCI Interrupt Link [LNKC] enabled at IRQ 11
[ 3.575191] PCI Interrupt Link [LNKD] enabled at IRQ 10
[ 3.576872] virtio-pci 0000:00:04.0: virtio_pci: leaving for legacy driver
[ 3.634068] PCI Interrupt Link [LNKA] enabled at IRQ 10
[ 3.635781] virtio-pci 0000:00:05.0: virtio_pci: leaving for legacy driver
[ 3.692992] virtio-pci 0000:00:07.0: virtio_pci: leaving for legacy driver
[ 3.780975] Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled
[ 3.812174] 00:05: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A
[ 3.843770] 00:06: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A
[ 3.853012] brd: module loaded
[ 3.856809] loop: module loaded
[ 3.859792] virtio_blk virtio2: [vda] 156250000 512-byte logical blocks (80.0 GB/74.5 GiB)
[ 3.864384] vda: vda1 vda2 vda3 < vda5 vda6 vda7 >
[ 3.867092] Uniform Multi-Platform E-IDE driver
[ 3.868498] ide-cd driver 5.00
[ 3.869493] Loading iSCSI transport class v2.0-870.
[ 3.871494] isci: Intel(R) C600 SAS Controller Driver - version 1.2.0
[ 3.873451] megasas: 07.705.02.00-rc1
[ 3.874614] mpt3sas version 25.100.00.00 loaded
[ 3.876435] VMware PVSCSI driver - version 1.0.7.0-k
[ 3.877965] hv_vmbus: registering driver hv_storvsc
[ 3.883524] scsi host0: ata_piix
[ 3.885134] scsi host1: ata_piix
[ 3.886213] ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc0c0 irq 14
[ 3.888259] ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc0c8 irq 15
[ 3.890640] Fusion MPT base driver 3.04.20
[ 3.892275] Copyright (c) 1999-2008 LSI Corporation
[ 3.893842] Fusion MPT SPI Host driver 3.04.20
[ 3.895261] Fusion MPT FC Host driver 3.04.20
[ 3.896623] Fusion MPT SAS Host driver 3.04.20
[ 3.898012] Fusion MPT misc device (ioctl) driver 3.04.20
[ 3.899874] mptctl: Registered with Fusion MPT base driver
[ 3.901549] mptctl: /dev/mptctl @ (major,minor=10,220)
[ 3.903334] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[ 3.905319] ehci-pci: EHCI PCI platform driver
[ 3.906698] ehci-platform: EHCI generic platform driver
[ 3.908307] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[ 3.910187] ohci-pci: OHCI PCI platform driver
[ 3.911567] uhci_hcd: USB Universal Host Controller Interface driver
[ 3.913578] usbcore: registered new interface driver usbserial_generic
[ 3.915572] usbserial: USB Serial support registered for generic
[ 3.917399] usbcore: registered new interface driver ftdi_sio
[ 3.919150] usbserial: USB Serial support registered for FTDI USB Serial Device
[ 3.921362] usbcore: registered new interface driver pl2303
[ 3.923059] usbserial: USB Serial support registered for pl2303
[ 3.924913] i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12
[ 3.928755] serio: i8042 KBD port at 0x60,0x64 irq 1
[ 3.930339] serio: i8042 AUX port at 0x60,0x64 irq 12
[ 3.932278] mousedev: PS/2 mouse device common for all mice
[ 3.934615] rtc_cmos 00:00: RTC can wake from S4
[ 3.936507] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1
[ 3.938399] rtc_cmos 00:00: registered as rtc0
[ 3.941054] rtc_cmos 00:00: alarms up to one day, 114 bytes nvram, hpet irqs
[ 3.945106] hidraw: raw HID events driver (C) Jiri Kosina
[ 3.947282] usbcore: registered new interface driver usbhid
[ 3.948983] usbhid: USB HID core driver
[ 3.950172] hv_vmbus: registering driver hv_balloon
[ 3.951867] Initializing XFRM netlink socket
[ 3.953515] NET: Registered protocol family 10
[ 3.956519] Segment Routing with IPv6
[ 3.957695] NET: Registered protocol family 17
[ 3.959115] Key type dns_resolver registered
[ 3.961531] mce: Using 10 MCE banks
[ 3.962662] sched_clock: Marking stable (3962611366, 0)->(4750729575, -788118209)
[ 3.965174] registered taskstats version 1
[ 3.966442] Loading compiled-in X.509 certificates
[ 3.974686] Loaded X.509 cert 'Build time autogenerated kernel key: a9441ad3e8c145a20454663a55c3e16d4fd43d29'
[ 3.980905] Key type encrypted registered
[ 3.982323] console [netcon0] enabled
[ 3.983485] netconsole: network logging started
[ 3.985179] rtc_cmos 00:00: setting system clock to 2023-01-07 11:02:10 UTC (1673089330)
[ 4.049458] ata2.00: ATAPI: QEMU DVD-ROM, 2.4.0, max UDMA/100
[ 4.051628] ata1.00: ATA-7: QEMU HARDDISK, 2.4.0, max UDMA/100
[ 4.053425] ata1.00: 6291456 sectors, multi 16: LBA48
[ 4.056894] scsi 0:0:0:0: Direct-Access ATA QEMU HARDDISK 0 PQ: 0 ANSI: 5
[ 4.059774] sd 0:0:0:0: Attached scsi generic sg0 type 0
[ 4.059871] sd 0:0:0:0: [sda] 6291456 512-byte logical blocks: (3.22 GB/3.00 GiB)
[ 4.063783] sd 0:0:0:0: [sda] Write Protect is off
[ 4.065340] sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
[ 4.068660] scsi 1:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.4. PQ: 0 ANSI: 5
[ 4.072449] sd 0:0:0:0: [sda] Attached SCSI disk
[ 4.074614] sr 1:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray
[ 4.076701] cdrom: Uniform CD-ROM driver Revision: 3.20
[ 4.079195] sr 1:0:0:0: Attached scsi generic sg1 type 5
[ 4.082768] Freeing unused kernel image memory: 1060K
[ 4.084443] Write protecting the kernel read-only data: 16384k
[ 4.087648] Freeing unused kernel image memory: 2012K
[ 4.090017] Freeing unused kernel image memory: 1660K
INIT: version 2.88 booting
mount: /proc: none already mounted on /proc.
[ 4.570636] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3
Starting udev
[ 5.155601] random: udevd: uninitialized urandom read (16 bytes read)
[ 5.158155] udevd[125]: starting eudev-3.2.5
[ 5.189680] random: udevd: uninitialized urandom read (16 bytes read)
[ 5.192835] random: udevd: uninitialized urandom read (16 bytes read)
[ 5.308399] failover: module verification failed: signature and/or required key missing - tainting kernel
[ 5.315388] virtio_net virtio0 cplane: renamed from eth0
Configuring network interfaces... done.
urandom start: failed.
Starting haveged random number generatorhaveged: command socket is listening at fd 3
.
INIT: Entering runlevel: 3
Starting ntpd: done
[ 5.873996] random: crng init done

[balaji.bandi]

I dd not find the cause of the issue with this log high level

can you post show module (output here)

follow again below procedure and let us know how it goes ?

https://www.cisco.com/c/en/us/support/docs/security/asa-firepower-services/118644-configure-firepower-00.html

[moha99edhamedan]

W-ASA# sho module

Mod Card Type Model Serial No.
---- -------------------------------------------- ------------------ -----------
1 ASA 5508-X with FirePOWER services, 8GE, AC, ASA5508 JAD21010J3S
sfr Unknown N/A JAD21010J3S

Mod MAC Address Range Hw Version Fw Version Sw Version
---- --------------------------------- ------------ ------------ ---------------
1 002c.c849.e987 to 002c.c849.e98f 1.1 1.1.18 9.16(3)23
sfr 002c.c849.e986 to 002c.c849.e986 N/A N/A

Mod SSM Application Name Status SSM Application Version
---- ------------------------------ ---------------- --------------------------

Mod Status Data Plane Status Compatibility
---- ------------------ --------------------- -------------
1 Up Sys Not Applicable
sfr Recover Not Applicable

[balaji.bandi]

SFR Recover Not Applicable

Try using my document to re-image and also try any old version to see if that works, if you still having an issue, I suspect some issues with the module raises a TAC case for replacement.

[Marius Gunnerud]

the module doesn't look to be in recovery, are you able to console into the SFR module?

If you are still having issues with the module, you might need to re-image the SFR module.

https://www.cisco.com/c/en/us/td/docs/security/asa/asa92/asdm72/firewall/asa-firewall-asdm/modules-sfr.pdf

[moha99edhamedan]

if I try to console to the SFR module the session gets stuck and can not change or open a new session 

i tried to re-image but the same logs appeared

[Marvin Rhoads]

It often takes a pretty long time when re-imaging a 5500 series Firepower module to be able to get into a console prompt - sometimes 1-2 hours. eventually it should allow login and let you proceed to install the full system image "system install ...".

[balaji.bandi]

Suggest to contact TAC , looks for me hardware issue as per your description

[Marius Gunnerud]

Could you provide the steps you are using to recover the SFR module.

Have you  consoled  in to the SFR module after running the recover command and uploaded the actual SFR image?