Wireless controller 5508 - Update 8.5.182.7

[IXL-ICT]

Dear all,

We have two wireless controller 5508 (HA) and we bought APs 1702i (refurbished).

Unfortunately , we have the issue with the certificate who is expired.

Is saw this on software download ( https://software.cisco.com/download/home/282600534/type/280926587/release/8.5.182.0  )
"Cisco is aware of an issue affecting image validation at software upgrades or downgrades in Cisco Wave 1/IOS Access Points. Either upgrade to 8.5.182.7 with the fix, or use a workaround. See https://www.cisco.com/c/en/us/support/docs/wireless/aironet-700-series-access-points/218447-ios-ap-image-download-fails-due-to-expir.html ."

Because I will have more APs later and I don't want change time everytime, I would like upgrade to 8.5.182.7 but we don't have service contract.

https://software.cisco.com/download/specialrelease/8f166c6d88b9f77aabb63f78affa9749 

Because it's a bug and they did a "Special release", Is there a way to obtain the update for free ?

Thanks for your help
Kind regards
Vincent

[marce1000]

  >...Because it's a bug and they did a "Special release", Is there a way to obtain the update for free ?
            - Sometimes if you claim and or argument security issues ; they will give it for free , 

 M.

[marce1000 · Accepted solution]

 - Note that recently there is also : https://software.cisco.com/download/specialrelease/2702eede2b47a5c3bb40795bbe836af6

 M.

[Rich R]

As Marce has pointed out - if you upgrade you should be upgrading to 8.5.182.11, not 8.5.182.7.  Link in Marce's reply and in my signature below.

You could try the security advisory approach but they might refuse because 5508 is beyond the End of Vulnerability/Security Support date and 8.5 is officially "end of life"
https://www.cisco.com/c/en/us/products/collateral/wireless/5500-series-wireless-controllers/eos-eol-notice-c51-740221.html
https://www.cisco.com/c/en/us/products/collateral/wireless/8500-series-wireless-controllers/bulletin-c25-744139.html

Read https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-20191106-wlc-dos.html and note the section "Customers Without Service Contracts".
Then send an email to TAC quoting this advisory URL, quoting that section, quoting the URL of the software you need to download (and which specific files there you need) and the serial number of your WLC.  If they accept the request then they will publish the software directly to you.

[IXL-ICT]

Dear marce1000 and Rich R,

Thanks a lot for you quick reply.

I installed the version 8.5.182.11 who is accessible for free and it works.

I addition, I had to use the following command config ap cert-expiry-ignore mic enable (wlc) because the AP was unable to join the WLC (capwap tunnel).

Kind regards
Vincent

[Rich R]

Yes I have all those field notices linked in my signature below <smile>
That problem is not new and would have affected your AP the next time it rebooted regardless of the version.