Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UTM 120 No firmware updates - No valid license?

Hi,

I have noticed that our recently purchased UTM 120 does not receive new firmwares. Pattern updates work well but the firmware download settings are greyed out.

Looking into logs "Up2Date messages" I found the entry below.

Any ideas?

Thanks in advance
Michael

2015:04:15-12:39:03 xyz audld[14199]: Starting Up2Date Package Downloader
2015:04:15-12:39:03 xyz audld[14199]: >=========================================================================
2015:04:15-12:39:03 xyz audld[14199]: id="3713" severity="error" sys="system" sub="up2date" name="Fatal: no valid license found, disabling system up2date"
2015:04:15-12:39:03 xyz audld[14199]: 
2015:04:15-12:39:03 xyz audld[14199]:  1. Modules::Logging::alf:100() /Modules/Logging.pm
2015:04:15-12:39:03 xyz audld[14199]:  2. Modules::Audld::SystemAttributes::_get_license:104() /Modules/Audld/SystemAttributes.pm
2015:04:15-12:39:03 xyz audld[14199]:  3. Modules::Audld::SystemAttributes::get:49() /Modules/Audld/SystemAttributes.pm
2015:04:15-12:39:03 xyz audld[14199]:  4. main::main:100() audld.pl
2015:04:15-12:39:03 xyz audld[14199]:  5. main::top-level:40() audld.pl
2015:04:15-12:39:05 xyz audld[14199]: 


This thread was automatically locked due to age.
  • Hi and welcome.

    What does the Management -> Licensing tab in WebAdmin say?
    Which license did you purchase?

    ----------
    Sophos user, admin and reseller.
    Private Setup:

    • XG: HPE DL20 Gen9 (Core i3-7300, 8GB RAM, 120GB SSD) | XG 18.0 (Home License) with: Web Protection, Site-to-Site-VPN (IPSec, RED-Tunnel), Remote Access (SSL, HTML5)
    • UTM: 2 vCPUs, 2GB RAM, 50GB vHDD, 2 vNICs on vServer (KVM) | UTM 9.7 (Home License) with: Email Protection, Webserver Protection, RED-Tunnel (server)
  • Hi,

    thanks for the fast reply.
    We purchased it without any subscriptions.
    Therefore all it has is the base functionality.
    Is this the reason? Does base functionality not include firmware updates?

    If so what would be the minimum license to purchase if all we need are the security updates and base functionality?

    Regards
    Michael
  • You need to have a valid subscription for firmware up2date to work. Ask your reseller.

    You can always mnually update the firmware by downloading the appropriate packages from ftp://ftp.astaro.com/UTM/v9/up2date/ and then upload them to the UTM.

    ----------
    Sophos user, admin and reseller.
    Private Setup:

    • XG: HPE DL20 Gen9 (Core i3-7300, 8GB RAM, 120GB SSD) | XG 18.0 (Home License) with: Web Protection, Site-to-Site-VPN (IPSec, RED-Tunnel), Remote Access (SSL, HTML5)
    • UTM: 2 vCPUs, 2GB RAM, 50GB vHDD, 2 vNICs on vServer (KVM) | UTM 9.7 (Home License) with: Email Protection, Webserver Protection, RED-Tunnel (server)
  • OK. That sounds logical.
    I will thank our reseller for their good consulting later today.

    Now I have tried to upload the first missing update but I see no result. I get a "Up2Date package imported successfully." but after that nothing happens.
    Log says:

    2015:04:15-13:23:23 xyz auisys[16381]: no HA system or cluster node
    2015:04:15-13:23:23 xyz auisys[16381]: removing '/var/up2date/geoip-install'
    2015:04:15-13:23:23 xyz auisys[16381]: removing '/var/up2date/geoipxtipv6-install'
    2015:04:15-13:23:23 xyz auisys[16381]: removing '/var/up2date/man9-install'
    2015:04:15-13:23:23 xyz auisys[16381]: removing '/var/up2date/ohelp9-install'
    2015:04:15-13:23:23 xyz auisys[16381]: Starting Up2Date Package Installer
    2015:04:15-13:23:23 xyz auisys[16381]: No suitable packages of type  found, skipping
    2015:04:15-13:23:23 xyz auisys[16381]: No suitable packages of type  found, skipping
    2015:04:15-13:23:23 xyz auisys[16381]: No suitable packages of type  found, skipping
    2015:04:15-13:23:23 xyz auisys[16381]: No suitable packages of type  found, skipping
    2015:04:15-13:23:25 xyz auisys[16381]: Doing HA sync
    2015:04:15-13:23:25 xyz auisys[16381]: Up2Date Package Installer finished, exiting
    2015:04:15-13:23:25 xyz auisys[16381]: id="3716" severity="info" sys="system" sub="up2date" name="Up2Date Package Installer finished, exiting"
  • You need to upload the appropriate files.
    All update packages are named "u2d-sys-9.-.tgz.gpg".
    You have to upload all updates in the chain, they depend on each other.

    Example:
    You're currently on 9.212003 and want to go to 9.310011. You have to upload these packages:
    u2d-sys-9.212003-304009.tgz.gpg
    u2d-sys-9.304009-305004.tgz.gpg
    u2d-sys-9.305004-306006.tgz.gpg
    u2d-sys-9.306006-307006.tgz.gpg
    u2d-sys-9.307006-308016.tgz.gpg
    u2d-sys-9.308016-309003.tgz.gpg
    u2d-sys-9.309003-310011.tgz.gpg

    Then wait some minutes until all packages are displaying on the "Overview" tab. An hit the update to lates firmware button.

    ----------
    Sophos user, admin and reseller.
    Private Setup:

    • XG: HPE DL20 Gen9 (Core i3-7300, 8GB RAM, 120GB SSD) | XG 18.0 (Home License) with: Web Protection, Site-to-Site-VPN (IPSec, RED-Tunnel), Remote Access (SSL, HTML5)
    • UTM: 2 vCPUs, 2GB RAM, 50GB vHDD, 2 vNICs on vServer (KVM) | UTM 9.7 (Home License) with: Email Protection, Webserver Protection, RED-Tunnel (server)
  • OK.
    I have 9.301-2 so uploaded
    u2d-sys-9.301002-302002.tgz.gpg

    But the result stays the same as in post #5
    Did I forget anything?

    Thanks once again for your help
  • itadm, did you get your problem sorted out?

    Because I am getting exactly the same problem as you, that is, I have the correct u2d file in the correct directory, but I get in post #5