cat4500x RSA signature verification failure

[tsgruu2000]

I try to install the k9 image to a Cat4500x without success. The image has been uploaded using tftp, boot variable set to the new image and config register set to 0x2102. The device hangs in rommon with the following message:

rommon 3 >boot bootflash:cat4500e-universalk9.SPA.03.05.02.E.152-1.E2.bin
Loading image !!!!!!!!!!!!!!!!!!!!!!

 Checking digital signature....

 Verification FAILED for bootflash:/cat4500e-universalk9.SPA.03.05.02.E.152-1.E2.bin, REASON: RSA signature verification failure

Even after uploading the binary again and check md5 checksum I got the same error message.
Could someone give me a hint what I am doing wrong? Is there another procedure to convert the switch from universal to universalk9?

Many Thank!
Kind Regards,
Urs
 

[ibrcan-t-systems]

Hi there I have a similar problem trying to get the cat4500es8-universalk9.SPA.03.06.00.E.152-2.E.bin working.

Here's the output:

 Current BOOT file is --- bootflash:cat4500es8-universalk9.SPA.03.06.00.E.152-2.E.bin

Loading image !!!!!!!!!!!!!!!!!!!!!!

 Checking digital signature....

 [mem:/cat4500es8-firmware]

 Digitally Signed Release Software with key version A

Rommon reg: 0x00084F80

Reset2Reg: 0x0C200000

########

 Conan controller 0x36A00518..0x36C97331 Size: 0x00CAC5EC @

####

 Radtrooper controller 0x3686497C..0x36A00516 Size: 0x00661EDC @

 Link: 0x00000080-0x16000000

 Program Done!

 Checking digital signature....

 Verification FAILED for mem:/cat4500es8-base, REASON: RSA signature verification failure

I have also a SUP8-E where the Software is working fine. I checked there the running config for rsa and it shows me this:

Switch#show run | incl rsa
boot system flash bootflash:cat4500es8-universalk9.SPA.03.06.00.E.152-2.E.bin
boot system flash bootflash:cat4500es8-universalk9.SPA.03.03.00.XO.151-1.XO.bin
 rsakeypair CISCO_IDEVID_SUDI

On the SUp8 which is not working it shows no rsa key?!?

Does anybody have an idea?

Thanks in advance

[arevak · Accepted solution]

I just had this same problem yesterday. I learned something new while trying to upgrade to a newer IOS. Make sure you run verify /MD5 on the file after you upload it to the switch. I have always been bad about this and now I see why it's a good practice. I downloaded the file again, deleted the old file off the switch, uploaded the new one, verified MD5, changed the config again and redundancy reloaded the standby supervisor. It's currently rebooting after a successful upgrade.

Probably an issue with your file.

[Kevin SAS]

Exactly the same problem for me with the cat4500e-universal.SPA.03.07.00.E.152-3.E image.

I tried the older version cat4500e-universalk9.SPA.03.06.01.E.152-2.E1 and now it works.

Maybe it was writed on the release note.

thanks ibrcan-t-systems !