Unable to migrate a configuration from Cisco Security Agent (CSA) Management Center (MC) 4.0 to version 5.0 and getting the error "Failed to import XML file for migrating agents of the 22.214.171.1245 management center"
This error message can apper when there is a problem with the hash values.
Note: These messages also appear in the clients which are set to migrate.
[yyyy-mm-dd 10:59:04.695] [PID=xxx] [Csamanager]: Software update type is 'Quiet, no auto-reboot' [yyyy-mm-dd10:59:04.695] [PID=xxx] [Csamanager]: Creating agent INI file : C:\agentsetup.ini [yyyy-mm-dd 10:59:04.785] [PID=xxx] [Csamanager]: swupdate:Downloading software update kit csamc45/software_kits/CSAAgent-windows-MKV126.96.36.199.exe (size=8235005) [yyyy-mm-dd 10:59:06.007] [PID=xxx] [Csamanager]: swupdate: Hash of downloaded software update does not match MC's hash
In order to succesfully migrate rules from CSA MC version 4.5 to 5.0, complete these steps:
Run this command on your 4.5 MC, on your local database:
cmd>osql -E -d csamc45
Choose hash from software_update where file_name like '%CSAAgent-windows-MKV188.8.131.52%'>go.
Name the returned value as curr_hash.
Choose the CSAMC50\migration directory and use WinZip to open the prepare_45_migration.exe file. The archive should contain a file named register_software_upgrade.sql. Open up this file and search for su_hash. This should take you next to the hash associated with the Microsoft Windows migration kit that was inserted into the database during update registration.
The hash ideally is a 40 hex-digit string.
Name this returned value as init_hash.
Compare init_hash with curr_hash. Normally, there are no differences. What is suspected is init_hash != curr_hash.
If this confirms, you need to complete these steps:
Delete the CSAAgent-windows-MKV184.108.40.206.exe file from CSAMC45\bin\webserver\htdocs\software_kits. The file should be in the database and is extracted upon agent request. Restore the database hash to the initial value and run the osql -E -d csamc45 command in order to update software_update set hash = 'XYZ' where file_name like '% CSAAgent-windows-MKV220.127.116.11%' >go.
Replace XYZ with init_hash (40 hex-digit string).
Now the 4.5 agent is able to download and run the migration update.
My customer is receiving alerts for the PkgCatalog.z file. The customer is telling me it is a McAfee file. I cannot create a Clean List for this file since the hash is always changing. I am attempting to use IAB so I can trust the file and eliminate the f...
Hi, Our ISE is in a HA setup (primary and secondary). Which one do we shut down (reboot) first? Second, is there a reboot button the ISE web interface to initialize the reboot or is it a CLI command only? Is there any documentation that explain this ...
Greetings, Due to a bug we will we reformatting and upgrading from 2.3 to 2.4. During the process I was planning to update the CIMC and BIOs to more current versions as the one is currently flash based. My question is, The system is currently fi...
We have had an issue a few times now so it is becoming an emergency. We had a domain controller reboot cause an issue with the policy node saying that a domain is unusable. We are running ISE 2.4 patch 8. Here are some key points:Domain Control...
Hello There, When I am trying to access cisco anyconnect via Display Name, it gives me a certificate is not trusted error.Trusted certificate is already installed. but when I try to access by fqdn "vpn.abc.com" it works without certificate erro...