For more details on the system requirements, see Understand System Requirements section in the Cisco Prime Infrastructure 3.10 Quick Start Guide.

This sections explain how to install the prime infrastructure security update 03 release.

• A client count mismatch issue has been identified in Cisco Prime Infrastructure 3.10.6 Security Update 03 due to the wireless LAN controller (WLC) telemetry failing to transmit data correctly. Cisco IOS XE versions 17.18.1 and 17.18.2 are incompatible with Cisco Prime Infrastructure. Upgrading Cisco Catalyst 9800 Wireless Controllers to version 17.18.3 is advised to ensure compatibility with Cisco Prime Infrastructure.

• Prime was migrated to Smart Receiver and as per their guidelines Direct and Transport Gateway mode is not supported. You must use Proxy to enable smart license using new url https://smartreceiver.cisco.com/licservice/license.

• Cisco announced the End-of-Life and End-of-Sale for all versions of Prime Infrastructure. Please use the PDMT to migrate data to Cisco Catalyst Center or use Cisco Networking Bot for self-help migration. For more information reach out to the migration team at primetodnacmigration@external.cisco.com.

• After installing Prime Infrastructure 3.10.6, you will be notified with the below warning message during ncs status, show version, ncs stop, ncs start, and restore console and this can be ignored as there is no functionality impact:

  SLF4J: Class path contains multiple SLF4J bindings.

  SLF4J: Found binding in [jar:file:/opt/CSCOlumos/lib/xmp-third-party/com.cisco.xmp.osgi.slf4j-log4j12-1.5.8.PATCHED.jar!/org/slf4j/impl/StaticLoggerBinder.class]

  SLF4J: Found binding in [jar:file:/opt/CSCOlumos/lib/xmp-third-party/log4j-slf4j-impl-2.20.0.jar!/org/slf4j/impl/StaticLoggerBinder.class]

  SLF4J: See http://www.slf4j.org/codes.html#multiple_bindings for an explanation.

• By default, the Auto monitoring device health does not monitor Security and VPN Devices. Due to this, Security and VPN Devices such as ASA devices does not appear in the Wired Device Availability report. To include them in the report, you will need to create an additional Device Health policy in the Monitoring Polices and select the ASA device in the policy, and generate the report.

• Cisco Prime Infrastructure supports only one unique registration interface for each GDOI group. If you need multiple registration interface support, please contact the Cisco Technical Assistance Center (TAC).

• The EOL/EOS message always appears in the login page of Prime Infrastructure.

• The EOL/EOS message appears in a pop-up notification window every time the user login to the Prime Infrastructure. However, after restart of the Prime Infrastructure services, the pop-up message will not be notified in the future.

• When you restore to Cisco Prime Infrastructure 3.10.6 from earlier versions 3.7.x, 3.8.x, 3.9.x, 3.10.x backup, you will be notified with the following warnings in the restore console window:

  
  Warning:
  <verisigntsaca> uses a 1024-bit RSA key which is considered a security risk. This key size will be disabled in a future update.
  <airespace-root> uses a 1536-bit RSA key which is considered a security risk. This key size will be disabled in a future update. 
  <verisignclass1ca> uses a 1024-bit RSA key which is considered a security risk. This key size will be disabled in a future update.
  <verisignclass1g2ca> uses a 1024-bit RSA key which is considered a security risk. This key size will be disabled in a future update.
  <verisignclass2g2ca> uses a 1024-bit RSA key which is considered a security risk. This key size will be disabled in a future update.
  <verisignclass3ca> uses a 1024-bit RSA key which is considered a security risk. This key size will be disabled in a future update.
  <verisignclass3g2ca> uses a 1024-bit RSA key which is considered a security risk. This key size will be disabled in a future update.
  <verisigntsaca> uses a 1024-bit RSA key which is considered a security risk. This key size will be disabled in a future update.
  Warning:
  <airespace-root> uses a 1536-bit RSA key which is considered a security risk. This key size will be disabled in a future update.

  These warning messages are displayed due to the recent upgrade of JRE in Prime Infrastructure 3.10.2. For more information, see JDK-8172404.

List of bugs resolved in Prime Infrastructure Release 3.10.6 security update 03

Click the identifier to view the impact and workaround for the caveat. This information is displayed in the Bug Search Tool. You can track the status of the open caveats using the Bug Search Tool.

You can access additional Cisco Prime Infrastructure documentation at:

http://www.cisco.com/en/US/products/ps12239/tsd_products_support_series_home.html

For information on obtaining documentation, submitting a service request, and gathering additional information, see What’s New in Cisco Product Documentation at: http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html .

Subscribe to What’s New in Cisco Product Documentation , which lists all new and revised Cisco technical documentation, as an RSS feed and deliver content directly to your desktop using a reader application. The RSS feeds are a free service.