Upgrade ASA 9.10(1)11 %ERROR: Signature not valid for file

[wake_the_dragan]

I have FPR-2120, currently running ASA 9.10(1)11, when I try to upgrade it, I am getting %ERROR: Signature not valid for file disk0:/cisco-asa-fp2k.9.16.4.SPA. Below is my asdm and fxos version. Any help would be greatly appreciated. Been troubleshooting this for 2 days.

Cisco Adaptive Security Appliance Software Version 9.10(1)11 Firepower Extensible Operating System Version 2.4(1.227) Device Manager Version 7.18(1)161

Accessing tftp://10.20.35.125/cisco-asa-fp2k.9.16.4.SPA...!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Verifying file disk0:/cisco-asa-fp2k.9.16.4.SPA...
Computed Hash SHA2: c974fac4d6d0bb24716004db528241c4
3db11d3e825ec3b91db163f66b976bd9
ac892572397562e8c8235d89986b33ba
b4ea418f8892010cb20e0f7721f53e42

%ERROR: Signature not valid for file disk0:/cisco-asa-fp2k.9.16.4.SPA.

[Rob Ingram]

@wake_the_dragan have you tried upgrading using another image, i.e. cisco-asa-fp2k.9.16.4.85.SPA (Sept 25) - is the actual latest version. https://software.cisco.com/download/home/286312088/type/280775065/release/9.16.4%20Interim or an intermediate upgrade using an older image such as 9.12, then perform the upgrade to 9.16.4.85.

[wake_the_dragan]

I have tried 9.12.2, 9.12.3, and 9.12.4 and same issue with them as well

[Marvin Rhoads]

@wake_the_dragan Please use the latest INTERIM version as recommended by @Rob Ingram .

https://software.cisco.com/download/home/286312088/type/280775065/release/9.16.4%20Interim

The error message you cited indicates you are using the base release(s).

The interim release notes specifically mention this issue:

"The ASA now validates whether the ASDM image is a Cisco digitally signed image. If you try to run an older ASDM image than 7.18(1.152) with an ASA version with this fix, ASDM will be blocked and the message “%ERROR: Signature not valid for file disk0:/<filename>” will be displayed at the ASA CLI. (CSCwb05291, CSCwb05264"

Reference: https://www.cisco.com/web/software/280775065/163160/ASA-9164-Interim-Release-Notes.html

[wake_the_dragan]

Just tried cisco-asa-fp2k.9.16.4.85.SPA, cisco-asa-fp2k.9.12.1.2.SPA, cisco-asa-fp2k.9.12.4.56.SPA, also cisco-asa-fp2k.9.12.4.67.SPA and running into same issue. Not sure what I am missing here

[johnlloyd_13]

hi,

have you tried to transfer the ASA image from USB or from ASDM?

copy disk1: disk0:

if it's still not working, i'd suggest open a TAC case or perform a scheduled reload.