Solved: UPGRADE READINESS CHECK - FAILED 000_start/000_0_check_user_agent.pl

sammer.wehaib · ‎02-28-2022

Greetings, I'm new here.

I faced this error when trying to run the Upgrade Readiness Check to upgrade my FMC from 6.6.4 to 7.0.1

[220228 17:01:52:368] MAIN_UPGRADE_SCRIPT_START
[220228 17:01:52:379] Readiness check for :Cisco_Firepower_Mgmt_Center_Upgrade-7.0.1-84
[220228 17:01:52:381] #####################################
[220228 17:01:52:382] # UPGRADE READINESS CHECK STARTING
[220228 17:01:52:383] #####################################
[220228 17:01:52:436] BEGIN 000_start/000_00_run_cli_kick_start.sh
[220228 17:01:52:621] END 000_start/000_00_run_cli_kick_start.sh
[220228 17:01:52:648] BEGIN 000_start/000_0_check_user_agent.pl
[220228 17:01:53:378] FAILED 000_start/000_0_check_user_agent.pl
[220228 17:01:53:384] continuing on next script due to readiness check.
[220228 17:01:53:408] BEGIN 000_start/000_0_minimum_28GB_RAM_NEEDED.sh
[220228 17:01:53:502] END 000_start/000_0_minimum_28GB_RAM_NEEDED.sh
[220228 17:01:53:529] BEGIN 000_start/000_check_platform_support.sh
[220228 17:01:53:658] END 000_start/000_check_platform_support.sh
[220228 17:01:53:686] BEGIN 000_start/000_check_sign_type.sh
[220228 17:01:53:697] END 000_start/000_check_sign_type.sh
[220228 17:01:53:717] SKIP 000_start/000_check_update.sh
[220228 17:01:53:737] SKIP 000_start/000_db_schema_check.sh
[220228 17:01:53:773] BEGIN 000_start/099_check_legacy_amp_port.pl
[220228 17:01:53:898] END 000_start/099_check_legacy_amp_port.pl
[220228 17:01:53:933] BEGIN 000_start/100_start_messages.sh
[220228 17:01:54:217] END 000_start/100_start_messages.sh
[220228 17:01:54:254] BEGIN 000_start/101_run_pruning.pl
[220228 17:02:26:107] END 000_start/101_run_pruning.pl
[220228 17:02:26:145] BEGIN 000_start/102_check_sru_install_running.pl
[220228 17:02:26:508] END 000_start/102_check_sru_install_running.pl
[220228 17:02:26:552] BEGIN 000_start/105_check_model_number.sh
[220228 17:02:26:654] END 000_start/105_check_model_number.sh
[220228 17:02:26:689] SKIP 000_start/106_check_HA_sync.pl
[220228 17:02:26:736] BEGIN 000_start/106_check_HA_updates.pl
[220228 17:02:27:092] END 000_start/106_check_HA_updates.pl
[220228 17:02:27:145] BEGIN 000_start/107_version_check.sh
[220228 17:02:27:523] END 000_start/107_version_check.sh
[220228 17:02:27:579] BEGIN 000_start/108_check_sensors_ver.pl
[220228 17:02:27:717] END 000_start/108_check_sensors_ver.pl
[220228 17:02:27:777] BEGIN 000_start/109_check_HA_MDC_status.pl
[220228 17:02:28:261] END 000_start/109_check_HA_MDC_status.pl
[220228 17:02:28:318] BEGIN 000_start/110_DB_integrity_check.sh
[220228 17:02:42:216] END 000_start/110_DB_integrity_check.sh
[220228 17:02:42:276] BEGIN 000_start/112_CF_check.sh
[220228 17:02:42:387] END 000_start/112_CF_check.sh
[220228 17:02:42:444] BEGIN 000_start/113_EO_integrity_check.pl
[220228 17:03:00:465] END 000_start/113_EO_integrity_check.pl
[220228 17:03:00:535] BEGIN 000_start/250_check_system_files.sh
[220228 17:03:00:642] END 000_start/250_check_system_files.sh
[220228 17:03:00:689] SKIP 000_start/320_remove_backups.sh
[220228 17:03:00:741] SKIP 000_start/400_run_troubleshoot.sh
[220228 17:03:00:815] BEGIN 000_start/410_check_disk_space.sh
[220228 17:03:01:182] END 000_start/410_check_disk_space.sh
[220228 17:03:01:265] BEGIN 200_pre/001_check_reg.pl
[220228 17:03:01:801] END 200_pre/001_check_reg.pl
[220228 17:03:01:825] BEGIN 200_pre/002_check_mounts.sh
[220228 17:03:01:932] END 200_pre/002_check_mounts.sh
[220228 17:03:01:960] BEGIN 200_pre/007_check_sru_install.sh
[220228 17:03:02:152] END 200_pre/007_check_sru_install.sh
[220228 17:03:02:182] BEGIN 200_pre/015_verify_rpm.sh
[220228 17:03:02:376] END 200_pre/015_verify_rpm.sh
[220228 17:03:02:392] SKIP 200_pre/100_650_remove_packet_analyzers.pl (not app
licable to this version SWVERSION=6.6.4 compare_to=COMPARE_TO=6.5.0 condition=CO
NDITION=lt)
[220228 17:03:02:411] SKIP 200_pre/100_check_dashboards.pl
[220228 17:03:02:432] SKIP 200_pre/101_check_uncommitted_data.pl
[220228 17:03:02:458] SKIP 200_pre/110_670_web_analytics.pl
[220228 17:03:02:480] SKIP 200_pre/110_setup_upgrade_ui.sh
[220228 17:03:02:509] SKIP 200_pre/120_fstab_fixup.sh
[220228 17:03:02:534] SKIP 200_pre/120_generate_auth_for_upgrade_ui.pl
[220228 17:03:02:562] SKIP 200_pre/152_save_etc_sf.sh
[220228 17:03:02:596] SKIP 200_pre/199_before_maintenance_mode.sh
[220228 17:03:02:627] SKIP 200_pre/200_enable_maintenance_mode.pl
[220228 17:03:02:658] SKIP 200_pre/202_disable_syncd.sh
[220228 17:03:02:690] SKIP 200_pre/400_restrict_rpc.sh
[220228 17:03:02:726] SKIP 200_pre/500_stop_system.sh
[220228 17:03:02:770] SKIP 200_pre/501_recovery.sh
[220228 17:03:02:810] SKIP 200_pre/505_revert_prep.sh
[220228 17:03:02:852] SKIP 200_pre/506_revert_prep_eventdb.sh
[220228 17:03:02:895] SKIP 200_pre/610_lamplighter_010_artifacts_export.sh
[220228 17:03:02:940] SKIP 200_pre/999_enable_sync.sh
[220228 17:03:02:981] MAIN_UPGRADE_SCRIPT_END
[220228 17:03:03:117] Readiness check completed....
[220228 17:03:03:125] Attempting to remove upgrade lock
[220228 17:03:03:126] Success, removed upgrade lock
[220228 17:03:03:128]
[220228 17:03:03:129] #######################################################
[220228 17:03:03:130] # UPGRADE READINESS CHECK COMPLETE status : FAILED! #
[220228 17:03:03:131] #######################################################

Marvin Rhoads · ‎02-28-2022

Most likely you have the deprecated Cisco User Agent configured as an identity source. It needs to be removed (and possibly replaced with ISE if you have that) prior to upgrading to Firepower 6.7 or higher.

Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/670/relnotes/firepower-release-notes-670/features.html#Cisco_Concept.dita_113a49fd-b57e-4d83-ab25-a16a7e060804

View solution in original post

Marvin Rhoads · ‎02-28-2022

Most likely you have the deprecated Cisco User Agent configured as an identity source. It needs to be removed (and possibly replaced with ISE if you have that) prior to upgrading to Firepower 6.7 or higher.

Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/670/relnotes/firepower-release-notes-670/features.html#Cisco_Concept.dita_113a49fd-b57e-4d83-ab25-a16a7e060804

sammer.wehaib · ‎02-28-2022

Appreciate the reply @Marvin Rhoads ... I will open a TAC with Cisco to help with migrating to ISE.

rhuysmans · ‎02-28-2022

You have the option of migrating to a full ISE appliance or using the smaller, ISE-PIC, which will do the job nicely in replacing the User Agent plus AAA functions. A much cheaper product with the option of migrating to an ISE appliance later on, if required.