This document provides the installation instructions and workflow for Cisco Crosswork Network Controller version 7.0.4, including details on patch file versions.

Patch installation workflow

Summary

You can upgrade to Crosswork Network Controller version 7.0.4 from either version 7.0.0 or version 7.0.3.

Upgrade process considerations

The upgrade process is disruptive and must be performed during a planned maintenance window. While the upgrade is deploying, some processes may temporarily report as unhealthy or degraded. The time required for each application or system patch can vary significantly, depending on factors such as the number of nodes in your deployment, the number of microservices being patched, and the overall system load.

  • Most applications return to healthy status within 30–60 minutes per application. System patch may require additional time (45 – 75 minutes), especially in larger deployments. For multi-node clusters, allow extra time proportional to the number of nodes.
  • Wait until the system status reflects "Healthy" before proceeding to install the next patch file.
  • If the system status does not return to "Healthy" within the expected time for your environment, or if you encounter any errors during patch installation, contact your Cisco Customer Experience representative for assistance before taking further steps.

Workflow

These are the stages of the high-level workflow for installing the Crosswork Network Controller 7.0.4 patch.

  1. Ensure that your environment meets all the installation prerequisites.
  2. Compare the versions of your current Crosswork Network Controller components with the new patch versions to determine which components need an upgrade. Download the Cisco Crosswork Network Controller 7.0.4 patch files for the versions you need.
  3. Extract and validate the Crosswork Network Controller 7.0.4 patch files.
  4. Copy and execute the Crosswork Infrastructure MOP script.
  5. Add and install the 7.0.4 patch files in the Crosswork Network Controller UI.
  6. Install the Cisco NSO function packs.

Patch installation prerequisites

This section describes the prerequisites needed to install the Crosswork Network Controller 7.0.4 patch.

  • Install Crosswork Network Controller version 7.0.0 or 7.0.3.
  • Ensure you have Cisco Crosswork Controller Administrator user credentials.
  • Identify the Management IP address (either a physical IP address or the Virtual IP address) used for your Crosswork VM deployment.
  • Back up your data. For more information, see Manage Crosswork Network Controller Backup and Restore. Additionally, the server being patched should have sufficient space to unarchive and copy the MOP scripts.
    • At least 5GB of free space in the /home/cw-admin/ directory.
    • At least 1GB of free space in the /tmp/ directory.
  • Update Cisco NSO to version 6.1.17.1 on your machine. For installation instructions, refer to the NSO 6.1.x documentation.
  • In a geo-HA enabled setup, ensure that all relevant files, such as the Crosswork Network Controller cluster, application CAPPs, and data gateways are installed on both the active and standby clusters.

Download Cisco Crosswork Network Controller 7.0.4 component patch files

For the Crosswork Network Controller 7.0.4, patches have been provided for these components. The other Crosswork components do not require patching unless you are running a release prior to version 7.0.3.

  • Crosswork Infrastructure
  • Crosswork Optimization Engine
  • Crosswork Health Insights
 Note
  • If upgrading from version 7.0.0, you must install all listed patch files in the order shown below. You only need to patch the applications that you have already installed on your system.
  • If a component patch is not a part of the patch release, ensure you have the version 7.0.3 for that component.
  • If upgrading from version 7.0.3, you only need to install the patch files with version 7.0.4.
 Note

You may have to refer to 7.0.3 and 7.0.4 directory in the Cisco Software Download to locate all the patches needed for your system.

Confirm the applications already installed on your system. If the version on your Crosswork Network Controller does not match the version listed below, download the latest patch file from the Cisco Software Download page to a local machine.

Install patch files in this order.

  1. Crosswork Infrastructure MOP file: signed-cw-na-infra-7.0.3-MOP-250526.tar.gz (Only if upgrading from a release prior to version 7.0.3)
  2. Crosswork Infrastructure patch: signed-cw-na-infra-patch-7.0.4-9-release-250825.tar.gz
  3. Crosswork Optimization Engine: signed-cw-na-coe-patch-7.0.4-2-release-250722.tar.gz
  4. Crosswork Active Topology: signed-cw-na-cat-patch-7.0.3-3-release-250428.tar.gz (Only if upgrading from a release prior to version 7.0.3)
  5. Element Management Functions: signed-cw-na-element-management-functions-patch-7.0.3-5-releaseems703-250526.tar.gz (Only if upgrading from a release prior to version 7.0.3)
  6. Crosswork Change Automation: signed-cw-na-ca-patch-7.0.3-1-release-250501.tar.gz (Only if upgrading from a release prior to version 7.0.3)
  7. Crosswork Service Health: signed-cw-na-aa-patch-7.0.3-4-release-250529.tar.gz (Only if upgrading from a release prior to version 7.0.3)
  8. Crosswork Health Insights: signed-cw-na-hi-patch-7.0.4-3-release-250811.tar.gz

Extract and validate patch files

This section explains how to extract and validate the downloaded 7.0.4 patch files.

Step 1

Navigate to the folder where the tar file was downloaded. As an example, consider the Crosswork Infrastructure signed patch image signed-cw-na-infra-patch-7.0.4-9-release-250825.tar.gz for this procedure.

cd <folder where the tar file was downloaded>

Step 2

Extract the signed file using this command.

tar -xzvf <signed image file>

The signed image package contains the patch file (.tar.gz) and relevant certificates for validation.

Example:

tar -xzvf signed-cw-na-infra-patch-7.0.4-9-release-250825.tar.gz

Output:

README
cw-na-infra-patch-7.0.4-9-release-250825.tar.gz
cw-na-infra-patch-7.0.4-9-release-250825.tar.gz.signature
CW-CCO_RELEASE.cer
cisco_x509_verify_release.py3
cisco_x509_verify_release.py

Step 3

Validate the extracted patch file using this command.

python3 cisco_x509_verify_release.py3 -e <.cer file> -i <.tar.gz file> -s <.tar.gz.signature file> -v dgst -sha512
 Note

You must include this command as a single line, and the tool will wrap it according to the screen width.

Example:

python3 cisco_x509_verify_release.py3 -e CW-CCO_RELEASE.cer -i cw-na-infra-patch-7.0.4-9-release-250825.tar.gz -s cw-na-infra-patch-7.0.4-9-release-250825.tar.gz.signature -v dgst -sha512

Output:

Retrieving CA certificate from http://www.cisco.com/security/pki/certs/crcam2.cer ...
Successfully retrieved and verified crcam2.cer.
Retrieving SubCA certificate from http://www.cisco.com/security/pki/certs/innerspace.cer ...
Successfully retrieved and verified innerspace.cer.
Successfully verified root, subca and end-entity certificate chain.
Successfully fetched a public key from CW-CCO_RELEASE.cer.
Successfully verified the signature of cw-na-infra-patch-7.0.4-9-release-250825.tar.gz using CW-CCO_RELEASE.cer

Step 4

Repeat these steps for each patch file you plan to install.

Copy and execute the Crosswork Infrastructure MOP

This section explains how to copy and execute the Crosswork Infrastructure 7.0.3 MOP file. This step is required only if you are upgrading from a release prior to version 7.0.3, as detailed in the Download Cisco Crosswork Network Controller 7.0.4 component patch files section.

Before you begin

In a geo-HA enabled setup, disable periodic synchronization by toggling off the Sync button on the Cross Cluster settings page before applying infrastructure MOP and infrastructure patches. No on-demand or periodic synchronization should be performed until the MOP and infrastructure patch upgrade are completed and all services are confirmed to be healthy. For more information, refer to Configure Cross Cluster Settings in the Cisco Crosswork Network Controller 7.1 Installation Guide

Extract and validate the signed-cw-na-infra-7.0.3-MOP-250526.tar.gz file, using the instructions in Extract and validate 7.0.4 patch files.

Step 1

Copy the extracted MOP file cw-na-infra-7.0.3-MOP-250526.tar.gz using the VIP address to the /home/cw-admin/ folder on one of the Crosswork Network Controller hybrid nodes.

scp {MOP file} cw-admin@{Crosswork Cluster VIP address}:/home/cw-admin/

Example:
scp cw-na-infra-7.0.3-MOP-250526.tar.gz cw-admin@{Crosswork Cluster VIP address}:/home/cw-admin

Step 2

SSH into the Crosswork Network Controller hybrid node where you copied the files, and change to root using sudo su - command.

Step 3

Extract the MOP file:

tar -xzvf <MOP file>

Example:

cd /home/cw-admin
tar -xvf cw-na-infra-7.0.3-MOP-250526.tar.gz

Output:

signed-cw-na-k8s-orchestrator-7.0.3-9-release-250526.tar.gz
update_orch.sh
logRotate_fix.sh
disable_unattended_upgrades.sh

Step 4

Update the permissions.

chmod 755 update_orch.sh

Step 5

Run the script file.

./update_orch.sh

When you run the script you will be asked for the password for the cw-admin user account.

 Note

Do not enter the password multiple times, even if prompted repeatedly. The script will automatically reuse the password provided during the initial input.

Wait 10 to 15 minutes for the update to complete and verify that the system is healthy.

Add and install 7.0.4 patch files

This section explains how to add and install the 7.0.4 patch files in the Crosswork Network Controller UI.

 Note

The patch upgrade is supported only if version 7.0.0 or 7.0.3 of the component is already installed on the target system.

Before you begin

Extract and validate the required 7.0.4 patch files using the instructions in Extract and validate 7.0.4 patch files.

Step 1

Create a new backup if you do not already have one.

Step 2

Check the health status of your system. If any components are unhealthy or degraded, resolve the issues or contact your Cisco Customer Experience representative before proceeding.

Step 3

Click on Administration > Crosswork Management, and select the Application Management tab. The Platform Infrastructure and any applications that are added are displayed here as tiles.

Step 4

Click on the Add File (.tar.gz) option to add the patch file that you extracted. As an example, consider the Platform Infrastructure patch file, cw-na-infra-patch-7.0.4-9-release-250825.tar.gz for this procedure.

The Add File (tar.gz) via Secure Copy popup window is displayed.

Step 5

Enter the relevant information and click Add.

Step 6

Once the patch file is added, you can observe the existing application tile displaying an upgrade prompt. Click the upgrade prompt to install the patch file.

In the Upgrade pop-up screen, select the new version that you want to upgrade to, and click Upgrade. Click on Job History to see the progress of the upgrade operation.

Step 7

After the installation is complete, go to Administration > Crosswork Manager and confirm all of the applications are reporting a Healthy status.

 Note

It is normal for some processes to be reported as unhealthy or degraded while the upgrade is being deployed. The updated status may take up to 30 minutes to reflect correctly. If, after 30 minutes, the status has not changed to Healthy, contact your Cisco Customer Experience representative. It is recommended to wait until the system is back to Healthy status before proceeding to install the next patch file.

Step 8

Repeat steps 3 to 7 to add and install the remaining Crosswork Network Controller application patch files that you need.

Install the Cisco NSO function packs

As the final step of the patch installation workflow, you must install or upgrade the Cisco NSO Function Packs to ensure compatibility with the Crosswork Network Controller 7.0.4. These NSO function packs and patch files are used for the 7.0.4 release:

  • T-SDN Core Function Pack: tsdn-7.0.4-nso-6.1.17.1.20250716.e7e9727d.tar.gz
  • Device Lifecycle Management (DLM) Function Pack: dlm-7.0.4-nso-6.1.17.1.20250718.7a54cb0.tar.gz
  • Telemetry Traffic Collector (TM-TC) Function Pack: tmtc-7.0.4-nso-6.1.17.1.20250714.93427844.tar.gz
  • Change Automation (CA) Function Pack: nca-7.0.4-nso-6.1.17.1.20250714.e60762c.tar.gz

Before you begin

Ensure that NSO version 6.1.17.1 is installed on your machine. For upgrading instructions, see Upgrade NSO documentation.

Step 1

Install or upgrade NSO function packs.

Fresh Installation: If Cisco NSO function packs are not already installed on Crosswork Network Controller, select the 7.0.4 versions of the required function packs from Cisco Software Download and install them using the Crosswork Network Controller UI. For instructions, see Install Cisco NSO Function Pack Bundles from Crosswork UI.

Existing Installation: If Cisco NSO function packs are already installed on Crosswork Network Controller, they must be manually upgraded to their 7.0.4 versions.

Step 2

Update the ncs.conf file to enable and configure NSO keepalive settings for stable RESTCONF integration.

Add the keepalive and keepalive-timeout configuration under both the <tcp> and <ssl> transport configurations. 

<webui>
    <enabled>true</enabled>
    <transport>
      <tcp>
        <enabled>true</enabled>
        <keepalive>true</keepalive>       
        <keepalive-timeout>3600</keepalive-timeout>
      </tcp>
      <ssl>
        <enabled>true</enabled>
         <keepalive>true</keepalive>   
         <keepalive-timeout>3600</keepalive-timeout>
      </ssl>
    </transport>
  </webui>
......
</webui>

Step 3

Restart NSO for the configuration in ncs.conf to take effect.

/etc/init.d/ncs restart

For more information, refer to the relevant upgrade instructions in the following guides: