Aironet 1850 Mobility Express Update failed.

[ThyRock]

I purchased an Aironet 1852I Access Point some years ago.  I need to update the Mobility Express to the lates version.  The update uploads to the AP but returns "Not Supported".  I have found online the fix is to update to 8,5,182.0 and then to the updated version.  The 8.5.182.0 is not available.  How can I get access to the 8.5.182.0 to fix this problem?

[Flavio Miranda]

Hi

 You need to find two information first. Which AP mode do you have and which version.

Run "show version" and share the result.

If this AP is in capwap mode, you need to convert it to mobility express before upgrade. And depending on the version, you may need to perform more then one upgrade to get to this version.

This is for coonvert in case it is capwap

https://semfionetworks.com/blog/convert-a-cisco-capwap-ap-to-a-mobility-express-ap/ 

[ThyRock]

The AP is Aironet 1852I with Mobility Express version 8.2.100.0.

Thanks for your reply.

[Flavio Miranda]

Then you can go up to 8.10.

https://software.cisco.com/download/home/286288455/type/286289839/release/8.10.151.0 

But in order to download software, your user must be associated to a contract

[ThyRock]

I have tried 8.10.151.0 and it returns "Not Supported".

I have found many users online that have had problems updating Mobility Express and the fix is to start at 8.5.182.0.

Even if a version later than 8.5.182.0 is installed these uses had to revert by to 8.5.182.0 to get the 8.10.151.0  to installed.

Thanks for your help.

[Rich R]

8.5.182.0 is definitely available - not sure where you looked ...

https://software.cisco.com/download/home/286285803/type/286289839/release/8.5.182.0

[ThyRock]

If you click the Download link it returns a popup that states you need a Service Contract.

Thanks for your help.

[jonathga94]

Could you please post the filename you are trying to install on your ME AP?

[ThyRock]

I purchased an Aironet 1852I Access Point from CDW some years ago.  The Aironet 1852I has Mobility Express version 8.2.100.0.  There have been several security vulnerabilities discovered since I purchased the AP and I need to update the Mobility Express to the lates version to protect against these vulnerabilities.  The Aironet 1852I has now been discontinued.  The version 8.10.152.0 and the latest version 8.10.171.0 updates are available for download from the Cisco download site.  These 2 versions will upload to may AP but will not install and returns "Not Supported".  I have found online posts that users have worked around this flaw by installing version 8.5.182.0 and then updating to one of the latest versions.  Many of these users have posted online that even with later versions than the 8.5.182.0 installed on their access points they have had to install the 8.5.182.0 and then the latest versions will install successfully.  Cisco has required a Service Contract to download the 8.5.182.0.  I don’t understand why Cisco has provided these latest fixes to security vulnerabilities for a now discontinued Access Point but has required a Service Contract to download a required version that will allow the installation to succeed.  I need to download the 8.5.182.0 version to fix this problem?

Thanks for your reply.

[ThyRock]

I have tried to install the following files.  Both transfer to the AP but will not install returning the following.  "Not Supported"

AIR-AP1850-K9-ME-8-10-151-0.zip

AIR-AP1850-K9-ME-8-10-171-0.zip

[Rich R · Accepted solution]

Are you following the instructions?

https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/8-2/b_Mobility_Express_Deployment_guide/b_Mobility_Express_Deployment_guide_chapter_01000.html#task_4387C8D3ADCA4D9EA365763A1DA5B2E2

You do NOT update with the ZIP file.  The zip file should be unzipped to your TFTP server then the ME AP will download the correct image(s) from the TFTP server where they were unzipped.

You don't specify the filename - only the path.  ME automatically selects the correct image name based on the AP model.

So if you unzip everything in the root of your TFTP server then the path will simply be / and if you use a sub-folder then /subfoldername/

Try following the instructions and see whether you have more success?

Regarding access to the downloads - you'll have to contact TAC.  Look through the security advisories and look for a section entitled "Customers without a support contract" (on some but not all advisories) then contact TAC via email referring to the advisory URL, quoting that section and the link to the file you need.  They'll then publish it for you directly.

[ThyRock]

Yes, I have followed your instructions and the link instructions exactly.

1. Unzip the file.
2. Copy the files in the unzipped folder to the TFTP Root folder.
3. Start the TFTP Server.
4. Disable the Windows 10 Pro workstation Windows Defender Firewall.
5. Login to the AP Mobility Express Controller version 8.2.100.0.
6. From the Management Software Update page, enter the TFTP Server IP address.
7. Enter “/” for the TFTP Server Root folder.
8. Click “Update Now”.
9.  The TFTP Server shows the ap1g4 file is uploading to the AP.
10. The AP shows the Update as InProgress.
11. After about 5 or 6 minutes, the AP shows the upload is “Complete”
12. About 5 seconds after the AP shows “Complete” the AP shows “Not Supported”.

The AP accepts the file but when the AP examines the uploaded file it returns “Not Supported”.

I have found many users post online that they have had the identical problem.  The only workaround I have found online for this flaw is to return to the version 8.5.152.0 and from that version the 8.10.151.0 or the 8.10.171.0 will install successfully.

I applicate your response very much.  I will follow your instructions and contact Cisco TAC with the Security Advisory information for help.

If Cisco helps with this problem I will be most grateful to you for pointing me in the right direction and will mark the post as solved.

Thanks very much for your reply.

[ThyRock · Accepted solution]

Many thanks to rrudling for pointing me in the right direction. 

 rrudling is a great asset to this community.

I post this in hopes that it will help others identify problems with some update failures and the solution to these issues.

Steps taken because of the instructions given by rrudling.

Located a Security Advisory to identify to TAC.

https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-airo-wpa-dos-5ZLs6ESz.html

Below is a screenshot of the above Security Advisory and the reason I contacted TAC.

Researched and found the problem I was experiencing in the following Release Notes for version 8.8.120.0 and 8.8.125.0.

The screenshots below are from the Release Notes for the 8.8.120.0 and 8.8.125.0 update that describes my problem perfectly.

https://www.cisco.com/c/en/us/td/docs/wireless/controller/release/notes/crn88mr2.html

My Problem is I cannot download the 8.5.182.0 release update.  When I click the download link, a popup window states a Service Contract is required.  This is the reason I contacted TAC.

I need access to download version 8.5.182.0 to follow the instructions contained in Release Notes for Cisco Wireless Controllers and Lightweight Access Points, Cisco Wireless Release 8.8.120.0 and 8.8.125.0. 

Release 8.8.120.0 and 8.8.125.0 are not available for download.

I am now working with TAC to get access to download version 8.5.182.0.

I hope this describes my problem well, will help others with this issue.

rrudling, Thanks again for your help.