Field Notice: FN - 64256 - Firepower 9300 and 4100 Series Security Platform Network Modules Might Fail to Boot - Hardware Upgrade Available

Notice

THIS FIELD NOTICE IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTY OF MERCHANTABILITY. YOUR USE OF THE INFORMATION ON THE FIELD NOTICE OR MATERIALS LINKED FROM THE FIELD NOTICE IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS FIELD NOTICE AT ANY TIME.

Revision History

Revision	Publish Date	Comments
1.0	15-Mar-17	Initial Release
10.0	11-Oct-17	Migration to new field notice system
10.1	18-May-18	Corrected the Image Links and Updated the Product Concepts
11.0	01-Feb-21	Updated the Problem Symptom and Workaround/Solution Sections and Removed the Upgrade Program Section

Products Affected

Affected Product ID	Comments
FPR-NM-4X40G
FPR-NM-6X10SR-F
FPR-NM-8X10G
FPR4K-NM-4X40G
FPR4K-NM-8X10G
FPR9K-NM-4X40G
FPR9K-NM-6X10SR-F
FPR9K-NM-8X10G

Defect Information

Defect ID	Headline
CSCvf34445	There were no defects filed with this field notice at the time of publication.

Problem Description

Some Firepower 9300 and 4100 Series Security Platform Network Modules were shipped with incorrect programming of the authentication device and fail to boot.

Background

Some Firepower Network Modules that shipped from approximately October 17, 2016 through January 20, 2017 contain incorrect programming of the authentication device. As a result, some network modules might indicate that the unit is not a genuine Cisco product and fail to boot. Affected units are not field upgradable.

Problem Symptom

Affected Firepower Network Modules output these error messages to the CLI or chassis manager GUI:

"The module in this slot may not be a genuine Cisco product." The Cause of the fault is indicated as "Act2 Fail."

An example of critical error CLI output messages on the FPR 9300 or FPR 4100 security appliance are shown here:

Severity: Critical

Code: F1510

Last Transition Time: 2016-12-13T13:21:34.875

ID: 85323

Status: None

Description: Failed Identification Test in slot - 2 (SSP MIO 6x10G FTW SFP+ SR Module). The module in this slot may not be a genuine Cisco product. Cisco warranties and support programs only apply to genuine Cisco products. If Cisco determines that your insertion of non-Cisco modules into a Cisco product is the cause of a support issue, Cisco may deny support under your warranty or under a Cisco support program such as SmartNet.

Affected Object: sys/switch-A/slot-2

Name: Equipment Switch Card Act2 Lite Fail

Cause: Act2 Fail

...output continues ...

These two images show the error message output on the Firepower Chassis Manager (FCM) GUI.

 

Refer to the Cisco Firepower 4100/9300 FXOS Faults and Error Messages guide for additional information on Firepower error messages.

Workaround/Solution

Cisco recommends replacement of affected Firepower Network Modules by requesting a Return Material Authorization (RMA) using your normal support process for Fix on Failure.

How To Identify Affected Products

Some Firepower Network Modules that shipped from approximately October 17, 2016 through January 20, 2017 are affected.

The serial number can be obtained from the CLI or through visual inspection of the network module.

CLI

Enter the show inventory command in order to obtain the serial number of the network module (highlighted in this example):

fp9300-A# conn fxos fp9300-A(fxos)> show inventory

NAME: "Chassis", DESCR: "Cisco Firepower 9300 Security Appliance"

PID: FPR9K-SUP , VID: V01 , SN: JAD1234ABCD

NAME: "Module 1", DESCR: "Firepower 9300 Supervisor"

PID: FPR9K-SUP , VID: V01 , SN: JAD1234ABCD

NAME: "Module 2", DESCR: "Firepower 8x10G SFP+ NM"

PID: FPR-NM-8X10G , VID: V01 , SN: JAD1234ABCD

Visual Inspection of the Firepower Network Module

The serial number label is located on the bottom surface of the module. The serial number can also be referenced on the Sales Order documentation.

Use the Cisco Serial Number Validation Tool in order to validate your Firepower Network Module serial number(s).

For More Information

If you require further assistance, or if you have any further questions regarding this field notice, please contact the Cisco Systems Technical Assistance Center (TAC) by one of the following methods:

• Open a service request on Cisco.com
• By email
• By telephone

Receive Email Notification For New Field Notices

Cisco Notification Service—Set up a profile to receive email updates about reliability, safety, network security, and end-of-sale issues for the Cisco products you specify.