Cisco released Field Notice FN74033 , stating that older versions of DNA Center will fail to download metadata after , due to certificate changes. If you are on an older release, an upgrade to a fixed version (e.g., 2.3.5.x or later) is required. Comparison of Solution Paths Effectiveness When to Use Manual Import Urgent upgrades or persistent API errors. Credential Refresh Authentication or account permission issues. Trustpool Update Certificate or SSL handshake failures. Software Upgrade For long-term fixes of known bugs (e.g., CSCwd15921).
Metadata downloads require valid root certificates to verify Cisco's servers: Navigate to .
Expired certificates in the Catalyst Center Trustpool can break the secure communication required to fetch metadata from software.cisco.com. Cisco released Field Notice FN74033 , stating that
In Catalyst Center, navigate to Design > Image Repository and use the Import function to upload the file from your local machine.
Ensure the appliance can actually reach the metadata endpoints: Metadata downloads require valid root certificates to verify
Once imported, check System > Settings > Integrity Verification to ensure the image is verified against Known Good Values (KGV) . 2. Refresh Cisco.com Credentials
Use the CLI to test connectivity to cloudsso.cisco.com and software.cisco.com . Cisco released Field Notice FN74033
Cisco has identified that certain external providers used for metadata APIs occasionally experience sporadic outages, causing this specific "invalid metadata" response.
Are you currently running a or three-node cluster, and what is your specific software version ? DNA CENTER IMAGE REPOSITORY ERROR NCSW10301
Newer versions like 2.3.7.9 may trigger this error if the product is not properly registered or approved to call Cisco cloud services.
