03-14-2014 12:34 AM - edited 03-07-2019 06:42 PM
I was trying to upgrade one of our N7K switches to version 6.2.6a last night and ran into the error Digital signature verification failed.
I downloaded a fresh copy of both kickstart and system software and got the same result. I then thought it might be a hardware to software compatibility issue (though I originally didn't think that would matter), so I downloaded the software from the Nexus 7004 page but received the same result. At this point I was thinking I might need to go to 6.2.2 before going any higher. So downloaded that software but still got the same result.
The steps I took are as follows:
1. download kickstart and system image from Cisco.com
2. copy kickstart and system image to Nexus bootflash via TFTP
3. issued the command install all kickstart bootflash:n7000-s2-kickstart.6.2.2.bin system bootflash:n7000-s2-dk9.6.2.2.bin
Installer will perform compatibility check first. Please wait.
Verifying image bootflash:/n7000-s2-kickstart.6.2.2.bin for boot variable "kickstart".
[####################] 100% -- SUCCESS
Verifying image bootflash:/n7000-s2-dk9.6.2.2.bin for boot variable "system".
[# ] 0% -- FAIL.
Return code 0x40450030 (Digital signature verification failed).
Pre-upgrade check failed. Return code 0x40930011 (Image verification failed).
The following is what i see in the logs.
2014 Mar 13 17:30:17 U1 %IGMP-3-API_FAILED: igmp [6140] m2rib_set_mc_config() failed in igmp_snoop_system_upg_abort()
2014 Mar 13 17:30:17 U1 %SYSMGR-3-SERVICE_TERMINATED: Service "installer" (PID 31273) has finished with error code SYSMGR_EXITCO
DE_FAILURE_NOCALLHOME (20).
2014 Mar 13 17:30:27 U1 %IGMP-4-SYSLOG_SL_MSG_WARNING: IGMP-3-API_FAILED: message repeated 1 times in last 18423331 sec
2014 Mar 13 18:26:27 U1 %IGMP-3-API_FAILED: igmp [6140] m2rib_set_mc_config() failed in igmp_snoop_system_upg_abort()
2014 Mar 13 18:26:27 U1 %SYSMGR-3-SERVICE_TERMINATED: Service "installer" (PID 3415) has finished with error code SYSMGR_EXITCOD
E_FAILURE_NOCALLHOME (20).
2014 Mar 13 18:26:37 U1 %IGMP-4-SYSLOG_SL_MSG_WARNING: IGMP-3-API_FAILED: message repeated 1 times in last 3369 sec
2014 Mar 13 19:13:58 U1 %IGMP-3-API_FAILED: igmp [6140] m2rib_set_mc_config() failed in igmp_snoop_system_upg_abort()
2014 Mar 13 19:13:58 U1 %SYSMGR-3-SERVICE_TERMINATED: Service "installer" (PID 7672) has finished with error code SYSMGR_EXITCOD
E_FAILURE_NOCALLHOME (20).
2014 Mar 13 19:14:08 U1 %IGMP-4-SYSLOG_SL_MSG_WARNING: IGMP-3-API_FAILED: message repeated 1 times in last 2851 sec
Any ideas as to what is wrong?
Thanks in advance.
03-15-2014 03:03 PM
03-17-2014 12:51 AM
That is what I originally though but I have downloaded different images (6.2.6a, 6.2.6, and 6.2.2) and all of them fail. I have also checked the MD5 hash against what is on the Cisco download page and they match up. I am wondering if this might be a bug?
In any case, I have opened up a TAC case and we will see what they have to say about it. Thanks for the reply.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide