Question about download and install a Firepower chassis system image

[swscco001]

Hello everybody,

I have to upgrade the ASA image on a Firepower 2130 cluster.

At the verify I was told I have to upgrade the system image before:

ENAM-ASA02 /firmware # verify security-pack version 9.20.3.16

The system is currently installed with security software package 9.14.4.24, which has:
   - The platform version: 2.8.1.200
   - The CSP (asa) version: 9.14.4.24
If you proceed with the upgrade 9.20.3.16, it will do the following:
   - upgrade to the new platform version 2.14.2.116
   - upgrade to the CSP asa version 9.20.3.16
During the upgrade, the system will be reboot

Verifying Security Software package 9.20.3.16. Verification could take several minutes.
Do you want to proceed? (yes/no) [yes]:^CENAM-ASA02 /firmware # verify security-pack version 9.20.3.16

The system is currently installed with security software package 9.14.4.24, which has:
   - The platform version: 2.8.1.200
   - The CSP (asa) version: 9.14.4.24
If you proceed with the upgrade 9.20.3.16, it will do the following:
   - upgrade to the new platform version 2.14.2.116
   - upgrade to the CSP asa version 9.20.3.16
During the upgrade, the system will be reboot

Verifying Security Software package 9.20.3.16. Verification could take several minutes.
Do you want to proceed? (yes/no) [yes]:yes

The Package Name is  : cisco-asa-fp2k.9.20.3.16.SPA
The Validation status: Ok

On the other firewall the system image 2.14.2.116 is already present:

firepower-2130 /firmware # show image
Name                                          Type                 Version
--------------------------------------------- -------------------- -------
cisco-asa.9.14.3.18.csp                       CSP APP              9.14.3.18
cisco-asa.9.14.4.24.csp                       CSP APP              9.14.4.24
cisco-asa.9.20.3.16.csp                       CSP APP              9.20.3.16
cisco-asa.9.8.2.csp                           CSP APP              9.8.2
cisco-ftd.6.4.0.102.csp                       CSP APP              6.4.0.102
fxos-k8-fp2k-firmware.1004.0103.0211.SPA      Switch Firmware      1004.0103.0211
fxos-k8-fp2k-firmware.1006.0104.0213.SPA      Switch Firmware      1006.0104.0213
fxos-k8-fp2k-firmware.1012.0200.0213.SPA      Switch Firmware      1012.0200.0213
fxos-k8-fp2k-lfbff.2.14.2.116.SPA             System Image         2.14(2.116)            <---
fxos-k8-fp2k-lfbff.2.2.2.52.SPA               System Image         2.2(2.52)
fxos-k8-fp2k-lfbff.2.6.1.133.SPA              System Image         2.6(1.133)
fxos-k8-fp2k-lfbff.2.8.1.172.SPA              System Image         2.8(1.172)

Where can I download the file fxos-k8-fp2k-lfbff.2.14.2.116.SPA and can it be installed on the FXOS CLI or do I have to use the graphical Chassis Manager?

Every hint is welcome.

Thanks a lot!

Bye
R.

[Rob Ingram]

@swscco001 "The ASA, ASDM, and FXOS images are bundled together into a single package. Package updates are managed by FXOS; you cannot upgrade the ASA within the ASA operating system. You cannot upgrade ASA and FXOS separately from each other; they are always bundled together."

https://www.cisco.com/c/en/us/td/docs/security/asa/fxos/config/asa-2100-fxos-config/cli.html

[Marius Gunnerud · Accepted solution]

in the FTD2000 series the software upgrade will also upgrade the FXOS image automatically, so you do not need to do anything other than initiate the FTD software upgrade.

It is only on the FTD 4000 and FTD 9000 series you need to upgrade the FXOS separately.

[swscco001]

Hi Marius,

this answered my questions completely!

I did the same at a Firepower 4115 cluster and wondered why I did not find the FXOS system image file
in the download section for the Firepower 2130.

Thanks a lot!

Bye
R.