Workflow

This is the process by which CDO upgrades the active/standby pair of ASAs:

Procedure

Step 1

CDO downloads the ASA and ASDM images to both ASAs.

Note

Users have the choice of downloading ASA and ASDM images but not upgrading immediately. If the ASA and ASDM images were downloaded previously, CDO will not download them again; CDO continues the upgrade workflow with the next step.

Step 2

CDO upgrades the secondary ASA first.

Step 3

Once the upgrade is complete and the secondary ASA returns to the "Standby-Ready" state, CDO initiates a failover so that the secondary ASA becomes the active ASA.

Step 4

CDO upgrades the primary ASA, which is now the current standby ASA.

Step 5

Once the primary ASA returns to the "Standby-Ready" state, CDO initiates a failover so that the primary ASA becomes the active ASA.

Warning

Upgrading devices that have self-signed certificates may experience issues; see New Certificate Detected for more information.