The image load on SSP appliance (ISG) fails with error 'Error: Image verification failed'
search cancel

The image load on SSP appliance (ISG) fails with error 'Error: Image verification failed'

book

Article ID: 382912

calendar_today

Updated On:

Products

SSP SSP-S210 PLATFORM SSP-S410 SSP-S410 PLATFORM ISG Proxy ISG Content Analysis

Issue/Introduction

The image load on SSP appliance fails with error 'Error: Image verification failed'
The image load is being attempted as below (Refer here )
<SSP_appliance_name>(config-images)# load https://downloadsapi.broadcom.com/utils/<generated code>/ProxySG_<SGOS>.bcsi
Progress: [################################] 100/100
Error: Image file verification failed

Environment

SSP(ISG) appliance hosting EdgeSWG/Content Analysis application hosts

Cause

The 'Image verification failed' error will be seen if the download link gets redirected to the login page. The SSP appliance (ISG) is unable to understand the login page and this results in an error.

This would happen if the download URL for bcsi image is generated and used after one hour since its generation in the load command for downloading the image on SSP appliance.

In the var/log/messages extracted from SSP appliance diagnostics , the following is seen
Oct 25 05:09:03 <SSP_appliance_name> cli_register.py[19845]: 2024-10-25 05:09:03,998:784055.730104 DEBUG:connectionpool.py:395:_make_request https://downloadsapi.broadcom.com:443 "GET /utils/<generated code>/ProxySG_<SGOS>.bcsi HTTP/1.1" 302 0
Oct 25 05:09:04 <SSP_appliance_name>  cli_register.py[19845]: 2024-10-25 05:09:04,409:784467.504025 DEBUG:connectionpool.py:395:_make_request https://downloadsapi.broadcom.com:443 "GET /WebInterface/login.html?path=/utils/<generated code>/ProxySG_<SGOS>.bcsi  HTTP/1.1" 200 15709

 

As a test, on attempting to open the image download link via the browser the following login page will appear instead of the image file getting downloaded as the download link gets redirected to a login page

Resolution

Once the download URL for BCIS image is generated from the symantec support download portal, this needs to be used within one hour of its generation to avoid getting redirected to login page