Has anyone experienced this error? I'm using another sensor as an ftp server and have been sucessful in applying past updates until now. Have also re-dowloaded the updates several time to make sure it is not corrupted. Any help is greatful. Thanks
idsm2-blade(config)# upgrade ftp://firstname.lastname@example.org//IDS-K9-sp-4.1-2-S58.rpm.pkg
Warning: Executing this command will apply a service pack to the application partition. The system may be rebooted to complete the upgrade.
Continue with upgrade? : yes
Error: idsPackageMgr: signature was not valid
Yes, this is the first thing to try. The message "signature not valid" means that the update file encryption signature was not valid, indicating that the file may be corrupt.
I would verify that md5sum/cksum of the package on the ftp server matches what is posted on CCO. Here is the info:
cksum: 2039528904 12238359
Login to the service account on the sensor that you're using as the ftp server and run md5sum on the Service Pack file IDS-K9-sp-4.1-2-S58.rpm.pkg. The result should be a9e729ad135781502571e7fcc9792792; please verify this value.
Sorry, I did not notice that you were using another sensor as an ftp server. I would assume that you are using a 3.1 sensor as the ftp server since 4.X does not
support an ftp server. In this case log in with the userid and password you use to put the files on ftp server. 3.1 sensors do not have the md5sum utility, so you will have to refefence the cksum already posted.
ids1# show ver
Cisco Systems Intrusion Detection Sensor, Version 4.1(1)S58
OS Version 2.4.18-5-phoenix
Sensor up-time is 22:21.
Using 409780224 out of 1979682816 bytes of available memory (20% usage)
Using 1.7G out of 17G bytes of available disk space (10% usage)
MainApp 2003_Jun_20_06.00 (Release) 2003-06-20T05:53:31-0500 Running
AnalysisEngine 2003_Jun_20_06.00 (Release) 2003-06-20T05:53:31-0500 Running
Authentication 2003_Jun_20_06.00 (Release) 2003-06-20T05:53:31-0500 Running
Logger 2003_Jun_20_06.00 (Release) 2003-06-20T05:53:31-0500 Running
NetworkAccess 2003_Jun_20_06.00 (Release) 2003-06-20T05:53:31-0500 Running
TransactionSource 2003_Jun_20_06.00 (Release) 2003-06-20T05:53:31-0500 Running
WebServer 2003_Jun_20_06.00 (Release) 2003-06-20T05:53:31-0500 Running
CLI 2003_Jun_20_06.00 (Release) 2003-06-20T05:53:31-0500
* IDS-sig-4.1-1-S57 19:33:04 UTC Mon Oct 20 2003
IDS-sig-4.1-1-S58.rpm.pkg 17:20:02 UTC Thu Oct 23 2003
Maintenance Partition Version 1.3(2)
ids1# show clock
*22:03:11 UTC Fri Nov 07 2003
It's in the /usr/nr directory but I've tried that syntax as well. When I log into this ftp service, it automatically puts me in this directory so I didn't need to specify the directory. Thanks
if you are using the default directory the you only use 1 "/" in the file name :
otherwise you are getting the absolute path, which means it should be looking for the file in the / directory instead of /usr/nr like you want.
I've tried that syntax as well. Something is awry. I just got it to upgrade from another ftp server, however. Thanks everyone for your time and suggestions. Awesome forum!!!