FTD/FDM upgrade: Invalid password: A blank or masked password is ...

[Karsten Iwen]

Hi,

this is a new error I've never seen before when upgrading an FDM managed FTD. It is an FP1120 running 6.6.5 that I wanted to upgrade to 7.0.1. The Upgrade runs to 38% and fails with the following log:

Fatal error: Invalid password: A blank or masked password is not allowed.

This is from the corresponding log-file:

root@firepower:800_post# tail -n 25 100_ftd_onbox_data_import.sh.log
	at com.cisco.ngfw.cd.CdStartupThread.run(CdStartupThread.java:56) [ConfigDispatcher-16.6-SNAPSHOT.jar:?]
	at java.lang.Thread.run(Thread.java:748) [?:1.8.0_282]
[Ljava.lang.StackTraceElement;@4d4c442f
2022-03-03 17:45:04 CDStartupTh: ERROR CdStartupThread:163 - Exception while initializing CD
java.lang.InterruptedException
	at java.lang.Object.wait(Native Method) ~[?:1.8.0_282]
	at com.cisco.ngfw.cd.messagehandlers.AbstractCdMessageHandler.waitAndGetResponse(AbstractCdMessageHandler.java:124) ~[ConfigDispatcher-16.6-SNAPSHOT.jar:?]
	at com.cisco.ngfw.cd.messagehandlers.AbstractCdMessageHandler.sendCommandAndGetResponse(AbstractCdMessageHandler.java:70) ~[ConfigDispatcher-16.6-SNAPSHOT.jar:?]
	at com.cisco.ngfw.cd.utility.DeploymentHelper.determineDeviceVariables(DeploymentHelper.java:847) ~[ConfigDispatcher-16.6-SNAPSHOT.jar:?]
	at com.cisco.ngfw.cd.CdStartupThread.determineDeviceMode(CdStartupThread.java:241) ~[ConfigDispatcher-16.6-SNAPSHOT.jar:?]
	at com.cisco.ngfw.cd.CdStartupThread.run(CdStartupThread.java:56) [ConfigDispatcher-16.6-SNAPSHOT.jar:?]
	at java.lang.Thread.run(Thread.java:748) [?:1.8.0_282]
2022-03-03 17:45:04 main: INFO  ConfigDispatcher:268 - Sent interrupt signals to threads
2022-03-03 17:45:04 main: INFO  ThreadPoolTaskScheduler:208 - Shutting down ExecutorService 'NGFWCacheScheduledExecutorSingleThread'
ownership of '/ngfw/var/cisco/deploy/tmp' retained as www:www
Invalid password: A blank or masked password is not allowed.
com.cisco.ngfw.onbox.exceptions.NGFWApplicationException: ApplicationException: Invalid password: A blank or masked password is not allowed.
com.cisco.ngfw.onbox.aspects.service.ExceptionHandlerAspect.validateMethodInvocation(ExceptionHandlerAspect.java:52)
sun.reflect.GeneratedMethodAccessor120.invoke(Unknown Source)
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
java.lang.reflect.Method.invoke(Method.java:498)
org.springframework.aop.aspectj.AbstractAspectJAdvice.invokeAdviceMethodWithGivenArgs(AbstractAspectJAdvice.java:644)
org.springframework.aop.aspectj.AbstractAspectJAdvice.invokeAdviceMethod(AbstractAspectJAdvice.java:633)
Reporting error : Invalid password: A blank or masked password is not allowed.
Fatal error: Invalid password: A blank or masked password is not allowed.

Has anyone an idea what is causing this error?

[Jitendra Kumar]

I am not sure.

maybe this new version supports a specific password length like 8 or 10  characters with complexity like small letters, capital letters, special characters, etc.

Thanks,

Jitendra

[Karsten Iwen]

There are only the admin- and a local VPN-user. Both have passwords >16 characters with small and capital letters, numbers and special characters. I don't expect that this error is related to these users.

[Jitendra Kumar]

Its looks like a java error..

As per the below error.

Thread:163

https://stackoverflow.com/questions/16865149/boostthread-thread-create-issue

https://stackoverflow.com/questions/58248908/how-to-solve-exception-in-thread-awt-eventqueue-0-java-lang-nullpointerexcept

Thanks,

Jitendra