Unable to Set ASDM Image on 5515-x

[kbowles]

I have a 5515-x firewall that use to allow ASDM connections without issue. Now out of nowhere the ASDM image has decided to remove itself and not allow itself to be added back. 

I have done the following 

hq-fw# show asdm image
Device Manager image file not set

hq-fw(config)# asdm image disk0:asdm-7201.bin
% ERROR: ASDM signature verification failed
hq-fw(config)#

Helppppppp lol

I tried setting no http certificate-authentication inside and redo the asdm set image command but still same error. 

[Flavio Miranda]

@kbowles 

 Which is te ASA version? 

[kbowles]

Hi,

9.12(4) 62 is the code it is running. using asdm-7201

[Flavio Miranda]

Error seems quite similar to the one on this Bug. Although version 9.12 was not reported.

https://bst.cisco.com/bugsearch/bug/CSCwc12322?rfs=qvlogin

[kbowles]

Yes I had seen that bug and noted that 9.12 wasn't reported as affected. The weird part was it was working no issues last week. Nothing changed in the environment but now it does not work randomly. 

[Flavio Miranda]

Windows update? Maybe Java.

[kbowles]

I thought that too at first but I am able to ASDM into the other firewalls I manage. Thats also what led me to find that the asdm image had unset itself on the firewall in question. 

[Marvin Rhoads]

You could be seeing behavior related to this: https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwb05291

It is supposed to not affect 9.12(4)50 or higher in that release but the bugs sometimes regress. It could be that a firewall reload "forced" a revalidation of that newer ASDM release that is requiring it be signature-verified. You might try an older ASDM image since 7.18 (or even 7.12) will give you access to all supported features on that older ASA code.