IOS Patch Image failed to be Installed.

[dissai]

Hello Team,

I'm facing a challenge to apply a patch on the Cisco ISR4331. See the below error message from the router.

SIMBA-RT#install add file bootflash:isr4300_cpld_update_v2.0.SPA.bin activate commit
install_add_activate_commit: START Wed Mar 27 11:22:54 GMT 2024
mount: /tmp/sw/transient_1/isr4300_cpld_update_v2.0.SPA.bin: wrong fs type, bad option, bad superblock on /dev/loop18, missing codepage or helper program, or other error.
FAILED: install_add_activate_commit : bootflash:isr4300_cpld_update_v2.0.SPA.bin is not valid file or cannot be handled by install CLI.
SIMBA-RT#

Kind Regards,

DI

[Leo Laohoo]

Instructions for Addressing the Cisco Secure Boot Hardware Tampering Vulnerability on Cisco ISR 4000 Series Routers

[dissai]

Hello Leo,

I went through the process but I'm getting the below message.
The CPLD is locked. How can I unlock it? to allow the upgrade process.

[image: image.png]

Kind regards
DI

[dissai]

Hello Leo,

Hello Leo

I went through the process but I'm getting the below message.
The CPLD is locked. How can I unlock it? to allow the upgrade process.

[liviu.gheorghe]

The message displayed is:

An update isn't required.

Maybe this explains. why update is unsuccessful.

[dissai]

I think per the guideline the cdpld was supposed to be unlocked but mine is
locked.
Was wondering How to unlock it?

Detected platform: ISR4451
CPLD version: 16092742
The CPLD is unlocked.

[liviu.gheorghe]

I think you are trying to upgrade with the wrong file type. Download the isr4300-hw-programmables.16.07.02-ext_v2.07.SPA.pkg from https://software.cisco.com/download/home/285018115/type/283425232/release/16.7.2 , copy the file to the boot flash of the router and perform the upgrade with the following command:

upgrade hw-programmable cpld filename bootflash:sr4300-hw-programmables.16.07.02-ext_v2.07.SPA.pkg R0