OPERATIONAL DEFECT DATABASE
...
...
Nexus switch will return an error when trying to upgrade to newer images. For instance: 7.0(3)I7(5a) -> 7.0(3)I7(7) Return code 0x40450030 (Digital signature verification failed). Pre-upgrade check failed. Return code 0x40930011 (Image verification failed).
This has been observed on N3K-C3132Q-V with starting images of variants of 7.0(3)I7(5). switch# show mod Mod Ports Module-Type Model Status --- ----- ------------------------------------- --------------------- --------- 1 32 32x40G Supervisor N3K-C3132Q-V active * Mod Sw Hw Slot --- ---------------- ------ ---- 1 7.0(3)I7(5a) 1.0 NA Target image is newer 7.0(3)I7(x) or 9.2(x)
Disable image signature verification with the following command: (config)# no feature signature-verification
Install throws error even though the image checksum is correct. switch# show file bootflash:nxos.7.0.3.I7.7.bin md5sum a9d40fbfaf43c214c3d97cb290788d06 switch# install all nxos bootflash:nxos.7.0.3.I7.7.bin Installer will perform compatibility check first. Please wait. Installer is forced disruptive Verifying image bootflash:/nxos.7.0.3.I7.7.bin for boot variable "nxos". [################## ] 85% -- FAIL. Return code 0x40450030 (Digital signature verification failed). Pre-upgrade check failed. Return code 0x40930011 (Image verification failed). Install is successful after disabling the image verification: switch(config)# no feature signature-verification WARNING: This will disable digital image signature verification for all NxOS software attempted to be installed using any install method. Are you sure you want to continue? (y/n) : [n] y WARNING: Image Signature Verification has been Disabled! switch(config)# install all nxos bootflash:nxos.7.0.3.I7.7.bin Notifying services about system upgrade. [####################] 100% -- SUCCESS Compatibility check is done: Module bootable Impact Install-type Reason ------ -------- -------------- ------------ ------ 1 yes disruptive reset default upgrade is not hitless Images will be upgraded according to following table: Module Image Running-Version(pri:alt) New-Version Upg-Required ------ ---------- ---------------------------------------- -------------------- ------------ 1 nxos 7.0(3)I7(5a) 7.0(3)I7(7) yes 1 bios v04.24(04/21/2016) v04.24(04/21/2016) no Switch will be reloaded for disruptive upgrade.
Click on a version to see all relevant bugs
Cisco Integration
Learn more about where this data comes from
Bug Scrub Advisor
Streamline upgrades with automated vendor bug scrubs
BugZero Enterprise
Wish you caught this bug sooner? Get proactive today.
