Hi, All!
Try upgrade IOS-XR from 4.3.4 to 6.4.2. But during install i got error message:
RP/0/RSP0/CPU0:M9-ASR02(admin)#show install log 28 detail
Mon Sep 24 15:50:30.125 MSK
Install operation 28 started by user 'alex' via CLI at 15:43:03 MSK Mon Sep 24 2018.
(admin) install add /tftp://10.100.7.21/ASR9K-6.4.2/XR/asr9k-mpls-px.pie-6.4.2
Install operation 28 failed at 15:43:40 MSK Mon Sep 24 2018.
Install logs:
Install operation 28 '(admin) install add /tftp://10.100.7.21/ASR9K-6.4.2/XR/asr9k-mpls-px.pie-6.4.2' started by user 'alex' via CLI at 15:43:03 MSK Mon Sep 24 2018.
Error: Cannot proceed with the add operation because the pie file '/tftp://10.100.7.21/ASR9K-6.4.2/XR/asr9k-mpls-px.pie-6.4.2' is corrupt.
Error:
Error: The following pie was not added due to an error:
Error: asr9k-mpls-px.pie-6.4.2
Install operation 28 failed at 15:43:40 MSK Mon Sep 24 2018.
I checked checksum and size of PIE, but all seems ok. As i know, version 4.3.4 has problem with root certifacate, but before upgrade, i installed new root certificate and also i installed poost-expired SMU (CSCut52232-1.0.0).
RP/0/RSP0/CPU0:M9-ASR02(admin)#show install
Mon Sep 24 15:51:40.756 MSK
Secure Domain Router: Owner
Node 0/RSP0/CPU0 [RP] [SDR: Owner]
Boot Device: disk0:
Boot Image: /disk0/asr9k-os-mbi-4.3.4/0x100305/mbiasr9k-rsp3.vm
Active Packages:
disk0:asr9k-mini-px-4.3.4
disk0:asr9k-fpd-px-4.3.4
disk0:asr9k-mcast-px-4.3.4
disk0:asr9k-mpls-px-4.3.4
disk0:asr9k-px-4.3.4.CSCut52232-1.0.0
Node 0/0/CPU0 [LC] [SDR: Owner]
Boot Device: mem:
Boot Image: /disk0/asr9k-os-mbi-4.3.4/lc/mbiasr9k-lc.vm
Active Packages:
disk0:asr9k-mini-px-4.3.4
disk0:asr9k-mcast-px-4.3.4
disk0:asr9k-mpls-px-4.3.4
disk0:asr9k-px-4.3.4.CSCut52232-1.0.0
RP/0/RSP0/CPU0:M9-ASR02#show sam certificate brief root
Mon Sep 24 15:55:39.835 MSK
-------------------- SUMMARY OF CERTIFICATES -------------------
Certificate Location : root
Certificate Index : 1
Certificate Flag : TRUSTED
Serial Number : 90:B6:F4:F9:FF:B8:A9:DB
Subject:
emailAddress=jamohamm@cisco.com,CN=CSS Certificate Authority,OU=CSG,O=Cisco Systems,L=San Jose,ST=CA,C=US
Issued By :
emailAddress=jamohamm@cisco.com,CN=CSS Certificate Authority,OU=CSG,O=Cisco Systems,L=San Jose,ST=CA,C=US
Validity Start : 10:19:42 UTC Thu Oct 09 2014
Validity End : 10:19:42 UTC Sun Oct 06 2024
Certificate Location : root
Certificate Index : 2
Certificate Flag : TRUSTED
Serial Number : 32:E0:A3:C6:CA:00:39:8C:4E:AC:22:59:1B:61:03:9F
Subject:
CN=Code Signing Server Certificate Authority,O=Cisco,C=US
Issued By :
CN=Code Signing Server Certificate Authority,O=Cisco,C=US
Validity Start : 01:46:24 UTC Tue Oct 17 2000
Validity End : 01:51:47 UTC Sat Oct 17 2015
CRL Distribution Point
file://\\CodeSignServer\CertEnroll\Code%20Signing%20Server%20Certificate%20Authority.crl
CRL Distribution Point
http://codesignserver/CertEnroll/Code%20Signing%20Server%20Certificate%20Authority.crl
What is going on?
