ASR1001X Software Installation Failure

[Ihabmoussa]

I have two ASR1001x and I am trying to install the software version

asr1001x-universalk9_npe.16.07.01.SPA.bin

on the first  device, the installation worked properly. Everything is OK.
However on the second one, I have alsways the same failure message:

ROM:RSA Self Test Passed
ROM:Sha512 Self Test Passed
Self Tests Latency: 58 mSec

Package header rev 1 structure detected
Calculating SHA-1 hash...done
validate_package_cs: SHA-1 hash:
calculated b49f8674:8797558b:496e7b80:69e18511:47cb882e
expected b49f8674:8797558b:496e7b80:69e18511:47cb882e

Signature verification failed for key# 2
Signature verification failed for key# 3
Failed to validate digital signature
Signature verification failed for key# 2
Signature verification failed for key# 3
Failed to validate digital signature
RSA Signed REVOCATION Image Signature Verification Failed.
Package Load Test Latency : 7913 mSec

signature verification FAILED...
boot: error executing "boot bootflash:asr1001x-universalk9_npe.16.07.01.SPA.bin"
autoboot: boot failed, restarting...

Could you please help me with this problem ?
 

[marce1000]

  - Verify

 md5sum

of the image that you are trying to install ,

 M.

[Ihabmoussa]

I verified it 

..................................................................................................................................................................................................................................................................................................................................................................................................................................................Done!
Verified

(flash:asr1001x-universalk9_npe.16.07.01.SPA.bin) = 9338d02ca9e980363a2195216a0875c3

the image seems to be ok. It works properly on the other router

[marce1000 · Accepted solution]

 - Check ROMMON version , you may need a ROMMON upgrade, look at Release Notes for version you are trying to install and rommon compatibility , 

 M.

[Leo Laohoo]

Console into the router and reboot.  Post the entire

boot-up

process. 

If the router is still in ROMMON, post the complete output to the command

set

[Ihabmoussa]

The router is not in the rommon mode.
I installed an old image on it to check the conf settings
Here is the entire

boot-up

proces.

[gajownik · Accepted solution]

System Bootstrap, Version 15.4(2r)S, RELEASE SOFTWARE (fc1)
Copyright (c) 1994-2014 by cisco Systems, Inc.

You have affected ROMMON by below bug:
CSCur94666 Code-signed images greater than 512M fail to load
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCur94666
ROMMON upgrade is required
https://software.cisco.com/download/home/284932298/type/282046486/release/17.3(1r)

BTW 16.7 image will be EoL in a week:

https://www.cisco.com/c/en/us/products/collateral/routers/asr-1000-series-aggregation-services-routers/eos-eol-notice-c51-740376.html

[Ihabmoussa]

Thank you!! 
It is solved

[Leo Laohoo · Accepted solution]

Upgrade the ROMMON. 

Please refer to to the link below for instructions on how to upgrade the firmware (in Install Mode) and ROMMON in one reboot. 

Cisco ISR & ASR 1k Routers: IOS-XE/Firmware Upgrade (Install Mode)

[Ihabmoussa]

Thanks!