Image failed digital signature verification

[jeevak mukadam]

Hello,

We accidently lost ios for 2960-x switch and i tried to upload new one via xmodem rommon mode. I  copied new ios from other switch and also download from cisco website but in both the caseafter "boot flash:image.bin" command it ends with follwoing error.

Loading "flash:/c2960x-universalk9-mz.150-2a.EX5.bin"...Verifying image flash:/c2960x-universalk9-mz.150-2a.EX5.bin...............................................................................................................................................................................................................

........................................................................Image failed digital signature verification

Thanks a lot advance

[Richard Burts]

The Cisco images are now digitally signed to assure authenticity and correct content. Your switch is not accepting the verification of the images that you loaded. Either there has been some flaw in the way to you got the images and copied them to the switch or there is a problem on the switch. If you are quite sure that there were no errors or issues as you downloaded the image from the source (another switch or Cisco) and no errors or issues as you copied the image to the switch then perhaps there is an issue on the switch. Perhaps you could open a case with Cisco TAC.

HTH

Rick

[jeevak mukadam]

Hello Richard,

Thanks a lot. The issue has been resolved already by CISCO NOC while uploading compatible image.

This issue is known issue at cisco (A BUG) for 2960-x models. Cisco tried to upload same image that we lost before but still getting same "Image failed digital signature verification" error. Cisco even try to upload some other images which are as per documentation are compatible image but still getting same error.

Finally they fix it after many attempts and with one old compatible image.

There is an serious issue with 2960-x model switches, because of this we have to change images of all 7 switches so they can stack together.

Thanks

Jeevak

[Richard Burts]

Jeevak

Thanks for posting back to the forum and providing this update about the problem. Knowing that there is a bug that causes this will be helpful to other readers in the forum.

HTH

Rick

[Nathan.willis]

Hello... I ha e the same issue.  What version did they use to resolve your issue??  Many thanks!!!

[Leo Laohoo]

2960X can load/boot an IOS by using a supported USB thumb drive.

[Nathan.willis]

Still get image verification failed...

[Leo Laohoo]

Still get image verification failed...

"image verification failed ..."?  Two culprit: 

1.  The IOS is corrupt; and 

2.  An IOS bug.

What exact IOS version is the 2960X trying to boot?

[Nathan.willis]

I have tried the very newest image as well as older versions.  Attempted from flash and sub.  They all have the same issue.

apparently there is something else going on with this thing.  Almost like it has a hash key for verification purposes.

[Nathan.willis]

150-2.ex was the most recent attempt 

[Leo Laohoo]

Ok, console to the switch and reboot the switch.   Post the entire bootup process.  I want to see where it is failing.

[Nathan.willis]

System resetting...
PU rev: B
core 0 fam_start: 0x40002000
In FAM now...
Image passed digital signature verification
Booting 2nd Stage Bootloader, entry point 0xffee0100...
Board rev: 5
Testing DataBus...
Testing AddressBus...
Testing Memory from 0x00000000 to 0x1fffffff.../
Using driver version 4 for media type 1
Xmodem file system is available.
Base ethernet MAC Address: 70:10:5c:72:e2:80
The password-recovery mechanism is enabled.
USB EHCI 1.00
USB EHCI 1.00
USB Console INIT
Initializing Flash...
mifs[5]: 13 files, 1 directories
mifs[5]: Total bytes : 1806336
mifs[5]: Bytes used : 867840
mifs[5]: Bytes available : 938496
mifs[5]: mifs fsck took 0 seconds.
mifs[6]: 0 files, 1 directories
mifs[6]: Total bytes : 3870720
mifs[6]: Bytes used : 1024
mifs[6]: Bytes available : 3869696
mifs[6]: mifs fsck took 0 seconds.
mifs[7]: 5 files, 1 directories
mifs[7]: Total bytes : 258048
mifs[7]: Bytes used : 8192
mifs[7]: Bytes available : 249856
mifs[7]: mifs fsck took 1 seconds.
mifs[8]: 5 files, 1 directories
mifs[8]: Total bytes : 258048
mifs[8]: Bytes used : 8192
mifs[8]: Bytes available : 249856
mifs[8]: mifs fsck took 0 seconds.
mifs[9]: 1 files, 1 directories
mifs[9]: Total bytes : 122185728
mifs[9]: Bytes used : 18451968
mifs[9]: Bytes available : 103733760
mifs[9]: mifs fsck took 20 seconds.
...done Initializing Flash.
Loading "flash:/c2960x-universalk9-mz.150-2.EX.bin"...Verifying image flash:/c2960x-universalk9-mz.150-2.EX.bin........................................................................................................................................................................................................................................................................................Image failed digital signature verification

Error loading "flash:/c2960x-universalk9-mz.150-2.EX.bin"

[Leo Laohoo]

Hold on, what is the exact model of the switch?

Loading "flash:/c2960x-universalk9-mz.150-2.EX.bin"...Verifying image flash:/c2960x-universalk9-mz.150-2.EX.bin........................................................................................................................................................................................................................................................................................Image failed digital signature verification
Error loading "flash:/c2960x-universalk9-mz.150-2.EX.bin"

And can you please the complete ROMmon output "dir flash:".

[Nathan.willis]

Ws-xc2960x-48fpd-l

[Leo Laohoo]

In ROMmon, please post the complete output to the command "dir flash:".