BPA Release Notes v5.0 Patch 2

Available Languages

Updated:July 31, 2025
Document ID:1753969797308346

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Business Process Automation Release Notes

Introduction

Business Process Automation (BPA) is a cross-domain, multi-tier automation and orchestration solution that manages the lifecycle of network assets across various network architectures such as transport, data center, campus, Software-Defined Wide Area Network (SD-WAN), and security. Its benefits include reduced time to deliver new services, minimized capital and operational costs, improved availability, capacity and operational reliability through consistent and automated network configuration, and scalability.

BPA provides the following features:

  • An automation solution for managing the lifecycle of Cisco and third-party devices, with use cases such as device onboarding, template management, software conformance, upgrades, and configuration compliance
  • A workflow engine for end-to-end service integration and automation of business and operational processes
  • Process Templates for automating procedures, Market Variances for maintaining location data, and Form Designers for creating UI forms
  • An Adapter framework for building East-West integration to Operations Support Systems and Business Support Systems

BPA is integrated with the Cisco and Non-Cisco controllers listed below; however, integrations can be extended to other Cisco or third-party controllers due to BPA’s modular architecture.

  • Cisco controllers
    • Network Services Orchestrator (NSO)
    • Cisco Catalyst Center (formerly Cisco Digital Network Architecture Center)
    • Data Center Network Manager (DCNM)
    • Cisco Catalyst SD-WAN Manager (formerly Cisco vManage)
    • Umbrella
    • Duo
    • ThousandEyes
    • Direct-to-Device
    • Cisco Nexus Dashboard Fabric Controller (NDFC)
    • Cisco Crosswork Network Controller (CNC)
    • Cisco Secure Firewall Management Center (FMC)
  • Non-Cisco controllers
    • Ansible
    • Checkpoint Manager/Smart Console

Note: BPA requires the use of a subscription key and ensures that BPA deployments are eligible for necessary support and maintenance services. To acquire a subscription key, contact a Cisco representative or submit an email to bpa-subscriptions@cisco.com.

Upgrading to BPA v5.0 Patch 2

In the patch upgrade process, the Helm upgrade gets a MongoDB error due to a component upgrade. To upgrade to BPA v5.0 Patch 2:

  • Execute “Helm Delete” using the following command:

    helm delete bpa-rel --namespace bpa-ns
  • Execute “Helm Install” using the following command:

    helm install bpa-rel --create-namespace --namespace bpa-ns /opt/bpa-helm-chart
  • Update the Retrieval for Custom Micro-services JSON Web Token (JWT) to fetch the token from sessionStorage under the item name “jwt_token,” as the storage in localStorage is deprecated and discontinued in future releases.
  • Lightweight Directory Access Protocol is updated; currently, both old and new encryption key work.

What’s New

This section highlights key features, enhancements, and modifications introduced in the Cisco BPA v5.0 Patch 2 release.

OS Upgrade

Operating System (OS) Upgrade enhancements include the following:

  • Multi-step upgrade now includes support for Bridge Software Maintenance Updates (SMUs) as a separate path in the upgrade journey
  • Users can now view rules and evaluation results, along with the command output of the pre-and post-check templates in the Upgrade Job summary and the Upgrade PDF report
  • Software upgrade support is extended for vManage controller v20.12.4

SD-WAN

Support has been added for vManage controller v20.12.4.

Supported Controllers and Versions

Controller Types Supported Versions
NSO v5.5, v5.6, v5.7, v5.8, v6.0, v6.1, v6.2, v6.3
Cisco Catalyst Center v1.3.3, v2.1.2, v2.2.2, v2.2.32.3.3, v2.3.4, v2.3.5
DCNM v11.5
vManage v20.6.3, v20.9.3, v20.9.5, v20.12.4
CNC v4.1, v5.0, v6.0
NDFC v3.0.1(i) Fabric v12.1.2e, v3.0.1(i) Fabric v12.1.3b
FMC v7.2.5
Direct-To-Device The following OS types are supported: cisco-ios, cisco-iosxr, cisco-asa, arista-eos, juniper-junos
CheckpointFortinet R77.30, R80.20 Fortigate 3700D – 5.2.4, 6.0.5
Umbrella Umbrella SIG Advantage + Multi-Org + RBI L3
DUO D299.18
ThousandEyes Not applicable

Note:BPA v5.0 Patch 2 has been validated with the latest version of Google Chrome (v138.0.7204.158) and Mozilla Firefox (v140) browsers at the time of release.

Resolved Defects

Defect Tracking ID Description
DAA-88730 Previously, BPA compliance execution from backup configurations was slow due to limited parallel processing. This issue has been resolved by increasing the number of parallel consumers for parallel execution, enabling faster and more efficient performance.
DAA-85807 Previously, the Product Family displayed on the Config Compliance dashboard for Optus BPA v4.1.2 Patch 3 was incorrect. This issue has been resolved by removing the controller attribute and modifying the job creation logic to use Product Family from asset details.
DAA-84450 Previously, non-administrative users were unable to view configuration compliance policies after creation. This issue has been resolved by updating the success messages to ensure proper visibility.
DAA-91374 Previously, the BPA core service had database and NSO errors. These issues have been resolved by correcting the path for restconfapi.
DAA-84222 Previously, crypto.createCipher and crypto.createDecipher APIs were deprecated and considered cryptographically insecure due to a weak key derivation and static installation vectors. This issue has been resolved by updating the encrypt and decrypt methods.
DAA-91509 Previously, the device sync inventory API with a non-existent device in the controller NSO resulted in errors. This issue has been resolved by adding logic to exclude non-existent devices from being added to the inventory during a Sync Inventory operation.
DAA-93049 Previously, users were unable to create a template with a specific command in the Golden Configuration Template. This issue has been resolved by updating the code to manage the Delete button when the template creation modal is empty.
DAA-89818 Previously, the User task button did not disappear as expected when the timer was complete. This issue has been resolved by adding logic to hide the User task button once the timer is complete.
DAA-94440 Previously, the device manager API incorrectly appended two backslashes to “+” characters, causing string matching failures. This issue has been resolved by redundant escaping logic.

Known Issues

There are no known issues to report as part of this release.

Revision History

Revision Publish Date Comments
1.0
31-Jul-2025
Initial Release

Was this Document Helpful?

FeedbackFeedback

Contact Cisco