A specific bug (CSCvz87460) affects ASR 1002 routers with RP2 processors (specifically those with a Version Identifier of V07 or higher). Users often see a "FAILURE: MD5 signature does not match!"
Look for the Slot column containing RP0 or RP1 . Check the firmware version listed under the Firmware Version column to determine your current baseline. Pre-Upgrade Prerequisites
Log into your device and verify your current hardware and running ROMMON version using the following command: Router# show platform Use code with caution. asr1000-rommon.173-1r.spa.pkg
show software package file bootflash:asr1000-rommon.173-1r.spa.pkg verbose
: ROMMON upgrades frequently resolve hardware-level vulnerabilities and improve secure boot processes. A specific bug (CSCvz87460) affects ASR 1002 routers
: To perform the upgrade, the file is copied to the router's local storage (e.g., bootflash:
Are you upgrading a or a high-availability dual-RP system ? Pre-Upgrade Prerequisites Log into your device and verify
Once the router completes its reboot cycle, log back into the CLI via the console or SSH and run the following command to confirm the upgrade was successful: Router# show rom-monitor slot R0 Use code with caution. Expected Output Fields
If you are operating a dual-RP modular chassis (such as an ASR 1006 with dual RP2s), upgrade both slots to prevent a firmware mismatch during failovers:
Certain IOS-XE releases (e.g., 16.9.x → 17.3.x) require a minimum ROMMON version to boot. Loading a newer IOS-XE on an old ROMMON results in a boot loop or kernel panic.
Every part of this filename has a specific meaning. Understanding it prevents version mismatch errors.