Cisco AMP for endpoints linux product update failing

[hrithiktej]

We are trying to update cisco AMP for endpoints on our Red hat servers, but the update is failing and we are seeing following error 

Jul  6 04:21:01 vtechebsmt15 [41424] [updater]:[info]-[updater.c@772]:[140155227736192]: update window is open

Jul  6 04:21:01 vtechebsmt15 [41424] [updater]:[info]-[updater.c@815]:[140155227736192]: an update is available

Jul  6 04:21:05 vtechebsmt15 [41424] [updater]:[info]-[updater_os.c@355]:[140155227736192]: Will wait 10 seconds while verifying package: /opt/cisco/amp/etc/update/tmpXXqskocm/faupd_1_8_0_571.pkg

Package /opt/cisco/amp/etc/update/tmpXXqskocm/faupd_1_8_0_571.pkg is not signed

Jul  6 04:21:05 vtechebsmt15 [41424] [utilities]:[info]-[os_util.c@372]:[140155227736192]: Built and found path /opt/cisco/amp/bin/ampsigncheck

Jul  6 04:21:05 vtechebsmt15 [41424] [updater]:[error]-[updater.c@880]:[140155227736192]: installer verification failed

Jul  6 04:21:07 vtechebsmt15 [41424] [updater]:[error]-[updater.c@974]:[140155227736192]: Abnormal exit from verify state (Digital signature or key error)

Jul  6 04:21:07 vtechebsmt15 [41424] [updater]:[error]-[updater.c@981]:[140155227736192]: Update error 0xc1210006 (verify failed)

We have followed the product guide and configured the policy for auto product update, heart beat interval is set to 30mins and product update date range is selected as 1 week.

[Shubham Bharti · Accepted solution]

Update error 0xc1210006 means that the GPG Key is not installed or it's not correct. While importing the GPG key isn't mandatory if you want to install the Linux Connector, it is mandatory if you want to upgrade the connector via the Policy update.

You can navigate in Help Index to AMP for Endpoints Linux Connector -> Installing the AMP for Endpoints Linux -> Connector Updates for step-by-step details on how to import the GPG key.

Or Page 133 " Connector Updates" on https://docs.amp.cisco.com/en/A4E/AMP%20for%20Endpoints%20User%20Guide.pdf

[hrithiktej]

Thanks a ton sir ISSUE RESOLVED. Thanks a lot. :)