However, due to the deprecation of this webpage we now store IOS XR upgrade documentation in a few different formats under the software download page for a particular release for a particular product..
For products that only support 32-bit or 64-bit as docs.tar.
For ASR9K as px-docs.tar for 32-bit and x64-docs.tar for 64-bit.
32-bit IOS XR Certificate Expiry (Abraxas)
Pre-5.3.1 does not contain the new Abraxas code or certificate and XR code needed to install SMUs after Oct 17 2015
5.3.0 contains the workaround but not the integration of the CSS server
When trying to install or add a SMU/PIE post October 17 2015, you will run into the below error due to the expiration of the CSS certificate on Oct 17, 2015.
Error: Cannot proceed with the add operation because the code signing Error: certificate has expired. Error: Suggested steps to resolve this: Error: - check the system clock using 'show clock' (correct with 'clock set' if necessary). Error: - check the pie file was built within the last 5 years using '(admin) show install pie-info
There are SMUs and new certificates in some releases which will allow installing of packages post Oct 17 2015.
For older releases you will need to turboboot the router.
Pre-5.3.2 does not contain the SWIMS signing and only supports Abraxas or the legacy Code Signing Server (CSS) software which is now completly deprecated
5.3.2 to 6.3.1 support both Abraxas and SWIMS
6.3.2 and above supports only SWIMS signing
Some latest SMU created after Abraxas server decommission (after 5.3.4 SP9) are also signed with SWIMS only
Since 5.3.1 and prior releases supports only Abraxas (after Oct 17 2015) and 6.3.2 and above supports only SWIMS signing, routers cannot be upgraded from one to the other. If you are running 5.3.1 or prior then you must upgrade to 5.3.2-6.3.1 first and then to 6.3.2 or higher.
Question: I am running 5.3.1 and wish to upgrade to 6.4.2. Will this work?
Answer: No, you must first upgrade to an intermediary release that supports SWIMS.
Question: I am running 5.3.4 and wish to upgrade to 6.4.2. Will this work?
Answer: Yes, as 5.3.4 supports both Abraxas and SWIMS.
Question: I am running 5.3.1 and wish to upgrade to 5.3.4 plus latest SMU. Will this work?
Answer: Upgrade to 5.3.4 first and then installing SMU on top will work. However activating both 5.3.4 + latest SMU at once will fail as 5.3.1 won't understand SMU signage.
Error: Cannot proceed with the add operation because the pie file Error: '/tmp/install/tar/instdir/8918452_223000000/asr9k-video-px.pie-6. Error: 3.3' is corrupt.
Upgrade to 5.3.x first and then to a version of code which needs SWIMS
64-bit IOS XR RPM Signage
Pre-6.3.2 does not use signed RPMs and will therefore be affected
2017-07-25 10:33:16:: Traceback (most recent call last): File "/pkg/bin/install", line 2202, in <module> main(options,args) File "/pkg/bin/install", line 1440, in main upgrade_packages(options, pkglist) File "/pkg/bin/install", line 1758, in upgrade_packages upgrade(options,pkgs,cur_version) File "/pkg/bin/install", line 1919, in upgrade more_package = pkgstate.checkcompat() File "/opt/cisco/XR/packages/ncs5500-infra-220.127.116.11-r622/rp/bin/package.py", line 1218, in checkcompat version,pkg_name,release = result.split() ValueError: too many values to unpack
2017-07-25 10:33:16:: Error: An exception is hit while executing the install operation. If you hit same error on retries, please collect "show tech install" and contact cisco-support.
Install XR and sysadmin bridge SMU, both can be installed at the same time