C4500X Switch Can't support iOS with K9 Feature

[yohannesr]

I have a Cisco 4500X, and it has an IOS image (cat4500e-universalk9.SPA.03.08.01.E.152-4.E1.bin). I tried to upgrade to the latest version with the K9 feature, but the upgrade process failed. Then, I tried upgrading the iOS (cat4500e-universal.SPA.03.11.11.E.152-7. E11) without the K9 feature, and this upgrade process finished successfully. But I couldn't use such as SSH, Encryption Key, VPN and so on. Because the iOS image doesn't have K9 capabilities. Finally, I attempted to revert to the previous image because I want to use the K9 feature, but the upgrading process (Downgrade to previous one) is failed. I couldn't back to the previous image. Please someone help.

[marce1000]

       >...              but the upgrade process failed. 
  - Please elaborate  on what happens on these failures (including downgrading) ; such as screenshots (e.g.)

 M.

[yohannesr]

Currently, I am at the office and cannot share the output of the command. However, to clarify my problem, I was trying to download and upgrade the following IOS images:

• 3.11.11 with K9
• 3.10.01 with K9
• 3.09.01 with K9
• 3.08.01 with K9

But none of these K9 images were upgraded successfully, or the upgrade process failed. However, all the IOS images without the K9 feature worked and upgraded successfully. What could be the issue with the K9 images? Can you help, please?

[Leo Laohoo]

---

@yohannesr wrote:
but the upgrading process (Downgrade to previous one) is failed.

---

Why did it fail?  Is it because the BIN file is corrupt?

Why not download 3.11.11 with K9?

[yohannesr]

I tried to download and upgrade the following:

• 3.11.11 with K9,
• 3.10.01 with K9,
• 3.09.01 with K9, and
• 3.08.01 with K9.

None of these K9 images were upgraded successfully, or the upgrade process failed. However, all the IOS images without the K9 feature worked and upgraded successfully. What could be the issue with the K9 images?

[Leo Laohoo]

---

@yohannesr wrote:
None of these K9 images were upgraded successfully, or the upgrade process failed.

---

How?  How is the upgrade failing?  Show proof because we do not know where it is failing. 

Console into the switch and boot 3.11.11.  Post the entire bootup process.

[marce1000]

      @Leo Laohoo    >...or the upgrade process failed. 
                               - As Leo is saying please provide more info's

 M.

[yohannesr]

Hi Teams, here is the overall output from copying to boot iOS.

 Thanks for your support.

[marce1000]

  - FYI : https://community.cisco.com/t5/switching/cat4500x-rsa-signature-verification-failure/m-p/2466436/highlight/true#M292884
             https://community.cisco.com/t5/switching/cat4510r-e-rsa-signature-verification-failure/m-p/2924521/highlight/true#M359105

   M.

[Leo Laohoo]

What about 3.11.11? 

In ROMMON, post the complete output to the command "set".

[yohannesr]

it is properly boot.

[Leo Laohoo]

Post the complete output to the command "sh version".  I want to see what is the ROMMON version. 

[yohannesr]

The ROMMON version is 15.0(1r) SG12

[Leo Laohoo]

The reason why the chassis can boot 3.11.11 and not 3.8.1 is because in IOS version 3.11.11, the "restriction" about ROMMON version is lifted.  

3.8.1 is an old, old release.  For this, the switch needs to be on 15.0(1r)SG15.

[yohannesr]

Before I updated to 3.11.11, the switch was running 3.8.1 version with K9 feature. I was also trying to update to the latest images with K9, but it didn't work. If I update the ROMMON to 15.0(1r) SG15, can I use iOS versions with the K9 feature, such as:

• 3.11.11 with K9
• 3.10.01 with K9
• 3.09.01 with K9

Thanks for your support!