topic Re: VM Series in AWS not reading boot config from bucket in VM-Series in the Public Cloud

VM Series in AWS not reading boot config from bucket

Muttley — Mon, 11 Nov 2019 12:41:20 GMT

Hello,

I followed the instructions here: https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/bootstrap-the-vm-series-firewall/bootstrap-the-vm-series-firewall-in-aws

I only have config/bootstrap.xml, config/init-cfg.txt and the other three empty folders

I have set vmseries-bootstrap-aws-s3bucket=bucket_name in user_config

The instance is not reading the bootstrap config.

After boot the log shows Critical bootstrap-image-error no image detected

Any ideas on what might be wrong or any methods I can use to debug this issue further is much appreciated.

Stuart

Re: VM Series in AWS not reading boot config from bucket

jmeurer — Mon, 11 Nov 2019 12:47:42 GMT

I would double check that the IAM role is properly configured and assigned to the firewall. Additionally, ssh into the firewall and run the following commands for additional information regarding what may have failed.

show system bootstrap status

debug logview component vm_install_media

Re: VM Series in AWS not reading boot config from bucket

Muttley — Mon, 11 Nov 2019 13:50:51 GMT

Thank you,

The first command helped, second one is not available.

The problems was that my security group was blocking outbound access.

Stuart