Firmware Upgrade Repository no MD5

StellarBreeze

Solarwinds appears to not be calculating the MD5 for files in the firmware repository. If I go look in the repository, the MD5 column is blank for all files.

When a Firmware update task is created, it fails if "Verify uploaded firmware image integrity" is on, but completes successfully if it is off. This suggests that the server itself doesn't have an MD5 calculated for the file.

I have tried re-scanning the repository, adding and removing bin files to/from it, waiting for the next day to see if the MD5's show up, and rebooting the solarwinds front end. This is our first attempt to use firmware upgrades so we have no prior experience of the MD5's showing up or not etc.

StellarBreeze

For anyone who runs across this in the future, we were able to fix it.

Turns out that if FIPS cryptography is enabled, solarwinds will skip the MD5 generation step. I saw entries in my NcmBusinessLayerPlugin.log files (under C:\Programdata\solarwinds\logs\orion\NCM on our server), that were like "...SolarWInds.Cirrus.BusinessLayer.FirmwareUpgrade.DirectoryReader - FIPS mode is enabled on this engine. Skip Md5 hash calculation" and that was what made us realize what was happening.

To fix it, we needed to go into our GPO (and/or Local GPO) for the server, go to Windows Settings> Security Settings> Local Policies>Security Options and set 'System cryptography: Use FIPS compliant algorithms for encryption, hashing and signing' to disabled.

The MD5 column now populates properly in the firmware repository.