Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

VIP Green

Nexus 7K upgrade error: Digital signature verification failed

I was trying to upgrade one of our N7K switches to version 6.2.6a last night and ran into the error Digital signature verification failed.

I downloaded a fresh copy of both kickstart and system software and got the same result.  I then thought it might be a hardware to software compatibility issue (though I originally didn't think that would matter), so I downloaded the software from the Nexus 7004 page but received the same result.  At this point I was thinking I might need to go to 6.2.2 before going any higher.  So downloaded that software but still got the same result.

The steps I took are as follows:

1. download kickstart and system image from Cisco.com

2. copy kickstart and system image to Nexus bootflash via TFTP

3. issued the command install all kickstart bootflash:n7000-s2-kickstart.6.2.2.bin system bootflash:n7000-s2-dk9.6.2.2.bin

Installer will perform compatibility check first. Please wait.

 

Verifying image bootflash:/n7000-s2-kickstart.6.2.2.bin for boot variable "kickstart".

[####################] 100% -- SUCCESS

 

Verifying image bootflash:/n7000-s2-dk9.6.2.2.bin for boot variable "system".

[#                   ]   0% -- FAIL.

Return code 0x40450030 (Digital signature verification failed).

Pre-upgrade check failed. Return code 0x40930011 (Image verification failed).

 

The following is what i see in the logs.

 

2014 Mar 13 17:30:17 U1 %IGMP-3-API_FAILED:  igmp [6140]  m2rib_set_mc_config() failed in igmp_snoop_system_upg_abort()

2014 Mar 13 17:30:17 U1 %SYSMGR-3-SERVICE_TERMINATED: Service "installer" (PID 31273) has finished with error code SYSMGR_EXITCO

DE_FAILURE_NOCALLHOME (20).

2014 Mar 13 17:30:27 U1 %IGMP-4-SYSLOG_SL_MSG_WARNING: IGMP-3-API_FAILED: message repeated 1 times in last 18423331 sec

2014 Mar 13 18:26:27 U1 %IGMP-3-API_FAILED:  igmp [6140]  m2rib_set_mc_config() failed in igmp_snoop_system_upg_abort()

2014 Mar 13 18:26:27 U1 %SYSMGR-3-SERVICE_TERMINATED: Service "installer" (PID 3415) has finished with error code SYSMGR_EXITCOD

E_FAILURE_NOCALLHOME (20).

2014 Mar 13 18:26:37 U1 %IGMP-4-SYSLOG_SL_MSG_WARNING: IGMP-3-API_FAILED: message repeated 1 times in last 3369 sec

2014 Mar 13 19:13:58 U1 %IGMP-3-API_FAILED:  igmp [6140]  m2rib_set_mc_config() failed in igmp_snoop_system_upg_abort()

2014 Mar 13 19:13:58 U1 %SYSMGR-3-SERVICE_TERMINATED: Service "installer" (PID 7672) has finished with error code SYSMGR_EXITCOD

E_FAILURE_NOCALLHOME (20).

2014 Mar 13 19:14:08 U1 %IGMP-4-SYSLOG_SL_MSG_WARNING: IGMP-3-API_FAILED: message repeated 1 times in last 2851 sec

 

Any ideas as to what is wrong?

 

Thanks in advance.

-- Please remember to rate and select a correct answer
Everyone's tags (1)
2 REPLIES
Hall of Fame Super Gold

Before you upload the files

Before you upload the files make sure you compare the MD5 hash values against the MD5 hash values found in the Cisco website. The error message you are seeing looks like the file(s) are corrupt.
VIP Green

That is what I originally

That is what I originally though but I have downloaded different images (6.2.6a, 6.2.6, and 6.2.2) and all of them fail.  I have also checked the MD5 hash against what is on the Cisco download page and they match up.  I am wondering if this might be a bug?

In any case, I have opened up a TAC case and we will see what they have to say about it.  Thanks for the reply.

-- Please remember to rate and select a correct answer
690
Views
0
Helpful
2
Replies