Launching soon: The world's first vendor agnostic bug scrubLearn more & join waitlist
OPERATIONAL DEFECT DATABASE
...
...
Nexus switch will return an error when trying to upgrade to newer images. For instance: 7.0(3)I7(5a) -> 7.0(3)I7(7) Return code 0x40450030 (Digital signature verification failed). Pre-upgrade check failed. Return code 0x40930011 (Image verification failed).
This has been observed on N3K-C3132Q-V with starting images of variants of 7.0(3)I7(5). switch# show mod Mod Ports Module-Type Model Status --- ----- ------------------------------------- --------------------- --------- 1 32 32x40G Supervisor N3K-C3132Q-V active * Mod Sw Hw Slot --- ---------------- ------ ---- 1 7.0(3)I7(5a) 1.0 NA Target image is newer 7.0(3)I7(x) or 9.2(x)
Disable image signature verification with the following command: (config)# no feature signature-verification
Install throws error even though the image checksum is correct. switch# show file bootflash:nxos.7.0.3.I7.7.bin md5sum a9d40fbfaf43c214c3d97cb290788d06 switch# install all nxos bootflash:nxos.7.0.3.I7.7.bin Installer will perform compatibility check first. Please wait. Installer is forced disruptive Verifying image bootflash:/nxos.7.0.3.I7.7.bin for boot variable "nxos". [################## ] 85% -- FAIL. Return code 0x40450030 (Digital signature verification failed). Pre-upgrade check failed. Return code 0x40930011 (Image verification failed). Install is successful after disabling the image verification: switch(config)# no feature signature-verification WARNING: This will disable digital image signature verification for all NxOS software attempted to be installed using any install method. Are you sure you want to continue? (y/n) : [n] y WARNING: Image Signature Verification has been Disabled! switch(config)# install all nxos bootflash:nxos.7.0.3.I7.7.bin Notifying services about system upgrade. [####################] 100% -- SUCCESS Compatibility check is done: Module bootable Impact Install-type Reason ------ -------- -------------- ------------ ------ 1 yes disruptive reset default upgrade is not hitless Images will be upgraded according to following table: Module Image Running-Version(pri:alt) New-Version Upg-Required ------ ---------- ---------------------------------------- -------------------- ------------ 1 nxos 7.0(3)I7(5a) 7.0(3)I7(7) yes 1 bios v04.24(04/21/2016) v04.24(04/21/2016) no Switch will be reloaded for disruptive upgrade.