Step 1

From the main menu, choose Design > Image Repository.

Step 2

If you have already configured the Cisco.com user, skip ahead to Step 3. If you haven't, complete these steps:

1. Open an Incognito/private window in your browser (to avoid using previously cached credentials).

2. Open another Catalyst Center GUI instance and log in.

3. Open another instance of the Image Repository page.

4. Complete one of these tasks:

   If you...	Then...
   completed a fresh installation of Catalyst Center,	configure a new Cisco.com user by clicking the Add link in the Cisco.com ID field.
   upgraded to the latest version of Catalyst Center and want to use the same Cisco.com user that was configured previously,	reauthenticate that user by clicking the Re-Authenticate link in the Cisco.com ID field.
   upgraded to the latest version of Catalyst Center and don't want to use the same Cisco.com user as before,	delete the old Cisco.com user and then configure a new one. Click the Delete link in the Cisco.com ID field. Confirm the operation by clicking Delete in the resulting dialog box. Click the Add link in the Cisco.com ID field.

5. In the Information pop-up window, check one or both of these check boxes and then click Authenticate:

   • (Mandatory) I am in private or incognito mode

   • (Optional) Save credentials

6. In the Activate your device pop-up window, confirm that an activation code is displayed and then click Next.

7. In the Log in pop-up window, enter the cisco.com user's email address and then click Next.

8. In the Verify with your password pop-up window, enter the cisco.com user's password and then click Verify.

   The Device activated pop-up window appears.

9. Close the Device Activated pop-up window.

10. Refresh the Image Repository page.

11. In the Cisco.com ID field, confirm that the email address you entered for the user displays. Also confirm that you see the Change link.

Step 3

Click Routers, Switches, Wireless Controllers, Security and VPN, Sensors, or Virtual Devices in the top of the window or click the search or filter icon in the Image Families table to filter device families.

Step 4

Click Sync Updates and then click OK in the subsequent warning message to synchronize image information from cisco.com for all managed devices in Catalyst Center.

Step 5

Click Show Tasks to view status of all the tasks that are related to software images.

Step 6

Click Import Image to import a software image or software image update. For more information, see Import a software image.

Step 7

Click Update Devices to update a device in inventory.

Step 8

In the Image Families table, click Imported Images to view the details about imported software images. The Imported Images row always displays as the first row in the table.

Step 9

In the Image Families table, click the name of a device family to view all the software images associated with the particular device family.

1. In the left pane, click Roles & Tags, Major Versions, or Golden Images or click the search or filter icon in the Images table to filter the software images.

2. In the Version column, click the Add On link to view the applicable SMUs, PSIRT SMU, Subpackages, ROMMON, APSP, and APDP upgrades for the base image.

   Subpackages are the additional features that can be added to the existing base image. The subpackage version that matches the image family and the base image version display here.

   AP Service Pack (APSP) and AP Device Pack (APDP) are images for upgrading APs associated with wireless controllers.

   • When a new AP hardware model is introduced, APDP is used to connect to the existing wireless network.

   • For associated APs, critical AP bug fixes are applied through APSP.

   Note

   If you tag any SMU as golden, automatically activates when the base image is installed. You cannot tag a subpackage as golden. For ROMMON upgrades, the cisco.com configuration is mandatory. When a device is added, the latest ROMMON details are retrieved from cisco.com for applicable devices. Also, when the base image is imported or tagged, the ROMMON image automatically downloads from cisco.com.

3. In the Device(s) column, click the number of devices to view the devices that use the image.

4. In the Advisory column, click the number of critical or high advisories to view the advisories for a specific software image.

   The Image Advisory slide-in pane shows Family Name, Version, and Advisories of the software image. The advisories are classified into Critical, High, Medium, Low, and Informational.

   Click CRITICAL, HIGH, or MEDIUM to view the advisories specific to each category.

   To fix the advisories, do these steps:

   1. Click Fix Advisories.

      The Image Update window appears.

   2. Select a recommended software image to update the device.

      If the recommended software image is not available in the image repository, you can download it from cisco.com.

   3. Click Download and Mark Golden.

      From the Download Image dialog box, do one of these tasks:

      • Keep the Mark the image as golden after download check box checked (the default). Then, click Download. The software image is downloaded and marked as golden.

      • Uncheck the Mark the image as golden after download check box and click Download. The software image downloads to the repository but is not marked as golden.

   4. Click OK.

      The software image downloads. You can view the progress in Show Tasks.

5. In the Golden Image column, click the star icon to specify the software image as golden.

   If the software image that you specify as golden is not already uploaded into the Catalyst Center repository, click the download icon to import the software image.

   For more information about golden images, see About golden software images and Mark a software image as golden.

6. In the Device Roles & Tags column, do these steps:

   1. Click the edit icon to assign a device role or tag.

      To assign a device role and/or tag, the corresponding software image must have been imported.

   2. In the Assign Device Roles & Tags slide-in pane, select the device roles and tags for which you want to indicate that this is a golden software image.

      Note	Device tags take precedence over device roles when both are chosen for a software image. You can create and assign new device tags in Provision > Network Devices > Inventory.

   3. Click Save.

Step 1

From the main menu, choose System > Settings > Cisco.com Credentials.

Step 2

Verify that you have entered the correct credentials to connect to cisco.com.

Step 3

From the main menu, choose Design > Image Repository.

Step 4

Mark the recommended image as golden.

Step 5

Provision the recommended software image on devices in your network.

Step 1

From the main menu, choose Design > Image Repository.

Step 2

Click Import Image.

Step 3

On the Import Image/Add-on slide-in pane, import the software image by completing these steps.

Step 4

Click Show Tasks to verify that the image was imported successfully.

Step 5

Click the Add-On link to view the SMU.

Step 6

In the Device Role field, select the role for which you want to mark this SMU as golden. See Mark a software image as golden.

Step 1

From the main menu, choose Design > Image Repository.

Step 2

Click Imported Images.

Step 3

Manage the imported image using this table for instructions.

Step 1

From the main menu, choose Design > Image Repository.

Step 2

Under Image Name, find the software image of the device that is running in Install Mode.

Step 3

Click Import to upload the binary software image file for the image that is in Install Mode.

Step 4

Click Choose File to navigate to a software image stored locally or Enter image URL to specify an HTTP or FTP source from which to import the software image.

Step 5

Click Import.

Step 6

Click Show Tasks and verify that the software image you imported is green, indicating it has been successfully imported and added to the Catalyst Center repository.

Step 7

Click Refresh.

Step 1

From the main menu, choose Design > Image Repository.

Step 2

Under Family Name, click the device family for which you want to mark a software image as golden.

Step 3

Under Image Name, choose the software image that you want to mark as golden.

Step 4

Mark the software image for the device family as golden.

Step 5

In the Device Role & Tags column, choose a device role and device tags to which you want to mark a golden software image. Even if you have devices from the same device family, you can mark a different golden software image for each device role.

Step 1

From the main menu, choose System > Settings > Device Settings > Image Distribution Servers.

Step 2

In the Image Distribution Servers window, click Servers.

Step 3

Click Add to add a new image distribution server.

Step 4

Configure these image distribution server settings:

Step 5

Click Save.

Step 6

Because some legacy wireless controller software versions support only weak ciphers (such as SHA1-based ciphers) for SFTP, Catalyst Center should enable SFTP compatibility mode for SFTP connections from wireless controllers for software image management and wireless assurance. You can temporarily enable support for weak ciphers on the Catalyst Center SFTP server for up to 90 days. To allow weak ciphers:

1. Hover over the i icon next to the IP address of the SFTP server and click Click here.

2. In the Compatibility Mode slide-in pane, check the Compatibility Mode check box and enter a duration (from 1 minute to 90 days).

3. Click Save.

Step 7

(Optional) To edit the settings, click the Edit icon next to the corresponding image distribution server, make the required changes, and click Save.

Step 8

(Optional) To delete an image distribution server, click the Delete icon next to the corresponding image distribution server and click Delete.

Step 1

From the main menu, choose Design > Network Settings > Servers.

Step 2

Expand the Image Distribution area to select SFTP servers to act as image distribution servers.

Step 3

Check the Add image distribution servers check box to view the fields.

Step 4

From the Primary drop-down list, choose the image distribution server that you want to configure as primary.

Step 5

Click the icon and from the Secondary drop-down list, choose the image distribution server that you want to configure as secondary.

Step 6

Click Save.

Step 1

From the main menu, choose Provision > Network Devices > Inventory.

Step 2

From the Focus drop-down list, select Software Images. Select the device whose image you want to upgrade.

Step 3

From the Actions drop-down list, choose Software Images > Image Update.

Step 4

In the Image Update window, enter a unique name in Task Name field.

Step 5

In the Software Distribution Checks window, click the toggle button to enable or disable prechecks and postchecks for the software distribution.

1. Hover your mouse over the information icon to view the validation criteria and the CLI commands that are used for the validation.

2. Click the toggle button to uncheck the validators that you do not want to run for the current workflow.

3. (Optional) To add new custom prechecks and postchecks, do these steps:

   1. Click add a custom check to launch the New Custom Check window.

   2. Enter the Name for the custom check.

   3. From the When drop-down list, select pre, post, or both.

   4. From the Select a Test Device drop-down list, select the device you want to check.

   5. Click Open Command Runner, and enter the CLI commands.

   6. Expand Add Known Command-Patterns to Ignore During Checks to add a command pattern that is used to ignore the matching output for the checks.

      To add a command pattern:

      • To create a new pattern, enter a desired name and string or pattern.

      • To use an existing pattern, click most commonly used patterns, select the desired pattern, and click Add Selected.

      • Click Test All Patterns.

   7. Expand the Additional Criteria area.

      From the Operation drop-down list, select Distribution, Activation, or both.

   8. From the Device Series drop-down list, select the desired device series and click Save.

4. (Optional) To reorder the sequence of the checks, drag and drop a check in the desired order.

Step 6

In the Software Activation Checks window, click the toggle button to enable or disable prechecks and postchecks for the software activation.

Step 7

In the Device Activation Order window, do these steps:

1. To move the devices to sequential order, select the desired devices and click Move to Sequential Update Order.

2. In the Sequential tab, select the devices and click Reorder List.

   To reorder the sequence of the devices, drag and drop the devices in the order you want and click Finish Reorder.

   Note	By default, the device activation order is set to parallel as first. Click Edit to change the activation order.

3. Click the Abort on Update Failure toggle button to end the activation process on the remaining devices upon activation failure of the first device in the order.

4. To enable the ISSU upgrade, select the device that you want to upgrade. From the ISSU drop-down list, select Enable ISSU Upgrade.

Step 8

In the Schedule Task and Clean Up window, do these steps:

1. Click the Now radio button to start the activation or distribution immediately.

2. Click the Later radio button, and define the date, time, and time zone to schedule the activation or distribution later.

3. (Optional) Click the After Distribution toggle button to trigger the software activation process immediately after the software distribution.

4. (Optional) Check the Initiate Flash Cleanup After Activation check box to initiate a flash cleanup of the device’s memory.

   Note	Catalyst Center stores only the running software image and removes all the previous software images saved on the device.

Step 9

Check the Initiate Flash Cleanup after Activation check box to remove all the previous software images saved on the device.

Step 10

In the Summary window, review the configuration settings. To make any changes, click Edit.

Step 11

To proceed, click Submit.

Step 12

(Optional) To check the status of the update, from the Actions drop-down list, choose Software Images > Image Update Status.