PA-220 Unable to install Panos from 10.0.0 to later version

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

PA-220 Unable to install Panos from 10.0.0 to later version

L2 Linker

I was trying to upgrade a PA220 from 9.1.X to 10.1.12.

 

The Plan is to upgrade to 10.0.0(Install &Reboot) --->10.1.0 -->10.1.12(Install & Reboot)

 

After upgrading to 10.0.0, auto-commit completed and system is up and running without any issue. However, when I try to install 10.1.0 or 10.1.12. getting the below error.

 

Failed to install 10.1.0 with the following errors:.

    SW version is 10.1.0

    Traceback (most recent call last):

    File "/usr/local/bin/swm", line 18, in <module>

    swmmain.main(sys.argv[1:])

    File "/usr/share/pan-swm/swmmain.py", line 103, in main

    UI.runCommand(H)

    File "/usr/share/pan-swm/swmcli.py", line 270, in runCommand

    cmd(self.extcmds)

    File "/usr/share/pan-swm/swmcli.py", line 410, in do_install

    self.install_image(args)

    File "/usr/share/pan-swm/swmcli.py", line 484, in install_image

    swm.swmDatabase(self).cancel()

    File "/usr/lib/python2.7/site-packages/swm/swmdb.py", line 557, in cancel

    biosChanged = self.isBiosChanged(img)

    File "/usr/lib/python2.7/site-packages/swm/swmdb.py", line 533, in isBiosChanged

    if bool(app_flags_p) and ('swm' in app_flags_p.keys()) and ('secureboot' in app_flags_p['swm'].keys()):

    AttributeError: 'str' object has no attribute 'keys'

    Failed to install version 10.1.0 type pa

 

I tried to reinstall the 10.0.0, but it also failed with the same error.

 

Any suggestion or resolution to fix the issue.

 

#PA-220 #@kiwi @reaper 

1 accepted solution

Accepted Solutions

Community Team Member

Hi @Puvi12 ,

 

I've seen this before where PAN-OS has been installed but the system has not been restarted. Any install attempt fails with an error due to files not being setup as expected for scripts to run successfully.

 

Try running the following command from CLI : debug swm status

 

Confirm one of the states returns 'PENDING-CHANGE' and also confirm that the version matches the PAN-OS that the device was being upgraded to.

 

admin@PA-VM> debug swm status

Partition         State              Version
--------------------------------------------------
sysroot0          PENDING-CHANGE     10.2.7-h3
sysroot1          RUNNING-ACTIVE     10.1.12
maint             READY              10.2.7-h3

 

Check the device Task Manager to confirm that the 'Software Install' status is complete and the result is 'Successful'.

 

If the above is true you can restart the device to apply new PAN-OS version.

 

Hope this helps,

Kim.

LIVEcommunity team member, CISSP
Cheers,
Kiwi
Please help out other users and “Accept as Solution” if a post helps solve your problem !

Read more about how and why to accept solutions.

View solution in original post

3 REPLIES 3

Community Team Member

Hi @Puvi12 ,

 

I've seen this before where PAN-OS has been installed but the system has not been restarted. Any install attempt fails with an error due to files not being setup as expected for scripts to run successfully.

 

Try running the following command from CLI : debug swm status

 

Confirm one of the states returns 'PENDING-CHANGE' and also confirm that the version matches the PAN-OS that the device was being upgraded to.

 

admin@PA-VM> debug swm status

Partition         State              Version
--------------------------------------------------
sysroot0          PENDING-CHANGE     10.2.7-h3
sysroot1          RUNNING-ACTIVE     10.1.12
maint             READY              10.2.7-h3

 

Check the device Task Manager to confirm that the 'Software Install' status is complete and the result is 'Successful'.

 

If the above is true you can restart the device to apply new PAN-OS version.

 

Hope this helps,

Kim.

LIVEcommunity team member, CISSP
Cheers,
Kiwi
Please help out other users and “Accept as Solution” if a post helps solve your problem !

Read more about how and why to accept solutions.

L2 Linker

Thanks @kiwi for the prompt response. Let me check and confirm it..

Cyber Elite
Cyber Elite

also, first install the latest maintenance version in the 10.0.0 train (10.0.12) before moving on to 10.1

best practice that helps prevent running into bugs while upgrading

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization
  • 1 accepted solution
  • 1784 Views
  • 3 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!