Cisco ASA 5500-X Series Next-Generation Firewalls

ASA Upgrade to Version 9.1.3 Fails with "No Cfg structure found in downloaded image file" Error Message

Document ID: 116685

Updated: Jan 27, 2014

Contributed by David White, Cisco TAC Engineer.



This document describes a problem encountered when you attempt to upgrade the Cisco Adaptive Security Appliance (ASA) to Version 8.4.7 or later or to Version 9.1.3 or later. It also provides the upgrade path that resolves the problem.


When you attempt an ASA upgrade to these versions:

  • Version 8.4.7 or later versions in the 8.4 train of code
  • Version 9.1.3 or later

you receive this error message:

No Cfg structure found in downloaded image file

This error message is generated because the file structure for the ASA binary images changed in both Version 8.4.7 and Version 9.1.3. There is a specific upgrade path you must follow.


Follow this version upgrade process: 

  1. Locate your current version in the Current ASA Image column.
  2. Upgrade to the version listed in the First Upgrade column.
  3. Upgrade to one of the versions listed in the Final Upgrade column:
Current ASA ImageFirst UpgradeFinal Upgrade
8.2.x8. or later, 9.1.3 or later
8.3.x8. or later, 9.1.3 or later
8.4.1 through, or later, 9.1.3 or later
8.5.x9. or later or later or later and later
(to include 9.0.2 and later)
Not Applicable9.1.3 or later or later and laterNot Applicable9.1.3 or later

Note: If you upgrade to a final version that is later than Version 8.4.7 or Version 9.1.3, the same process applies. Just replace the 8.4.7 or 9.1.3 image in the Final Upgrade column with the final version to which you will upgrade.

Updated: Jan 27, 2014
Document ID: 116685