Edit /opt/crosswork/etc/proxy.conf :
Cisco’s software download portal often generates temporary, time-limited tokens for automated downloads. If the token expires before the download completes, the transaction ID becomes invalid.
Expired trustpool certificates can break the secure tunnel to Cisco's servers. Verify your certificates under Settings > Trust & Privacy > Trustpool .
: For NCS devices, log in to the device via CLI (Command Line Interface) and run the commands show alarms brief system active and show license platform detail . Look for alarms or statuses indicating that the SIA Grace Period has expired, which would block software upgrades.
Verify that the switch can resolve external addresses by pinging a public domain (e.g., ping cisco.com ).
In Catalyst Center, navigate to the and use the Import function to upload the file from your computer.
/api/software/metadata?image=cat9k_iosxe.17.09.01.bin
Once the file is verified, change the boot system path to point to the new image, save your configuration, and reload the device during your designated maintenance window:
intersight-cli firmware catalog sync --full
Step 2: Validate Integrity Verification and Known Good Values (KGV)
Example scenario: An engineer schedules an image download for 2 AM but last refreshed the software catalog at 10 PM. By 2 AM, the trans-id is invalid.
The "invalid metadata trans-id" specific error indicates a breakdown in the communication between your local appliance and Cisco’s backend.
If you want, tell me your device model, NX-OS/IOS version, exact command you ran, and the full error output (copy/paste) and I’ll provide targeted next steps.
Edit /opt/crosswork/etc/proxy.conf :
Cisco’s software download portal often generates temporary, time-limited tokens for automated downloads. If the token expires before the download completes, the transaction ID becomes invalid.
Expired trustpool certificates can break the secure tunnel to Cisco's servers. Verify your certificates under Settings > Trust & Privacy > Trustpool .
: For NCS devices, log in to the device via CLI (Command Line Interface) and run the commands show alarms brief system active and show license platform detail . Look for alarms or statuses indicating that the SIA Grace Period has expired, which would block software upgrades. Edit /opt/crosswork/etc/proxy
Verify that the switch can resolve external addresses by pinging a public domain (e.g., ping cisco.com ).
In Catalyst Center, navigate to the and use the Import function to upload the file from your computer.
/api/software/metadata?image=cat9k_iosxe.17.09.01.bin Verify your certificates under Settings > Trust &
Once the file is verified, change the boot system path to point to the new image, save your configuration, and reload the device during your designated maintenance window:
intersight-cli firmware catalog sync --full
Step 2: Validate Integrity Verification and Known Good Values (KGV) Verify that the switch can resolve external addresses
Example scenario: An engineer schedules an image download for 2 AM but last refreshed the software catalog at 10 PM. By 2 AM, the trans-id is invalid.
The "invalid metadata trans-id" specific error indicates a breakdown in the communication between your local appliance and Cisco’s backend.
If you want, tell me your device model, NX-OS/IOS version, exact command you ran, and the full error output (copy/paste) and I’ll provide targeted next steps.