Cisco ENCS: Failed to install content during bootstrap due to invalid image

Cisco ENCS: Failed to install content during bootstrap due to invalid image

5014
Created On 05/07/20 17:10 PM - Last Modified 05/07/20 17:13 PM


Symptom


  • While deploying VM-Series firewall in Cisco ENCS environment, content installation fails during bootstrap due to error "Invalid image. Failed to get major version, minor version, and digest for file panupv2-all-contents-xxxx-xxxx"
  • Below CLI output shows content installation failed during bootstrap:

admin@VM-300-ENCS> show system bootstrap status

Bootstrap Phase               Status         Details
===============               ======         =======
Media Detection               Success        Media detected successfully
Media Sanity Check            Success        Media sanity check successful
Parsing of Initial Config     Successful     
License Install               Successful     Successfully installed license key using authcode xxxxxxx
Content Install               Failed         Failed to install Content
Auto-commit                   Successful 
  • System logs under WebUI shows installation failure due to invalid image:
System logs:
2020/04/30 12:03:00 medium   general        general 0  Content package downloaded but installation could not be scheduled
2020/04/30 12:03:00 medium   general        general 0  Failed to upgrade Content package to version <unknown version>
2020/04/30 12:03:00 high     hw             bootstr 0  Content cannot be installed. Image File Authentication Error. Failed to determine version of content. 
2020/04/30 12:02:58 info     general        general 0  Content job started processing. Dequeue time=2020/04/30 12:02:58. Job Id=1.   
2020/04/30 12:02:58 info     general        general 0  Content job enqueued. Enqueue time=2020/04/30 12:02:58. JobId=1.  . Type: Full
2020/04/30 12:02:58 high     hw             bootstr 0  Invalid image. Failed to get major version, minor version, and digest for file panupv2-all-contents-8264-6059
2020/04/30 12:02:58 high     general        general 0  Palo Alto Networks content validation check skipped by user 'n/a' for panupv2-all-contents-8264-6059
2020/04/30 12:02:57 info     general        general 0  VM Appliance license is fetched and installed. Pan services will be restart due to capacity change after auto commit.
2020/04/30 12:02:57 info     general        general 0  VM Appliance license is installed.


Environment


  • Model: PA-VM
  • Environment: Cisco ENCS
  • Software Version: 8.1 and later 


Cause


  • The configuration drive supports a maximum size of 64MB.


Resolution


  • Due to this size limitation on ENCS/Openstack, content and software image updates through bootstrap were not qualified and won't be supported.


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g0000008TyKCAU&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail