Run pfSense-repoc -D and note the Model value. Don't post that output here as it contains private data. That should be shown as 'Amazon Web Services'. If it shows 'Unknown' open a ticket with us: https://www.netgate.com/tac-support-request Steve

Yes, you don't need a support sub to request an image so it doesn't matter what you select there.

@jimp This is now resolved, an upgrade direct from console did the trick :)

You'll probably need to wipe the start and end of the disk as described here: https://docs.netgate.com/pfsense/en/latest/troubleshooting/multiple-disks.html#clear-the-disk

How exactly did it fail?

@stephenw10 looks like the issue got resolved by itself today Thanks for your help.

@stephenw10 Many thanks, will review further. It’s up for a fairly decent price.

@lohphat I gave up awaiting further suggestions and just reinstalled from USB to 23.09 and re-upgraded.

@pfthbst said in Empty field "Firmware Branch" in <System/Update/Update Settings> after a fresh install v2.7.2: Under dns host override I redirected dns calls to ews.netgate.com to localhost. Ah, yes that would do it! Access to that is required to pull the dynamic repo data in 2.7. Timestamps in tcpdump are actually in epoch time but by default it displays that as UTC. I don't think tcpdump itself can use a local timezone, I could be wrong. If so though that would require some recoding to make the page show it as such. It's not a bug but could be a missing feature. Yes, it should be a new topic to discuss further.

@kiokoman thanks for the tip. Unfortunately fsck did not work. I will open a ticket. Thanks again and Happy New Year!

@noloader said in Where is /conf/upgrade_log.latest.txt located?: /conf/upgrade_log.latest.txt ^ right there you can either a) ssh in or; b) Diagnostics -> Command Prompt -> Download File or; c) Diagnostics -> Edit File Option b is a good option. Will get a copy on your local system, then open it there.

@SteveITS Thank you. I ended up doing this using an image provided to me from Netgate Support

@Stewart @SteveITS This was solved here. Due to changes in pkg, the new version of pkg may not be able to properly locate and use the CA trust store when running on the previous version before upgrading. If the firewall is unable to load packages or check for updates after selecting the CE 2.7.1 upgrade branch, run certctl rehash from the console, a root shell prompt, or via Diagnostics > Command Prompt. This will allow pkg to utilize the system certificates until the next reboot. This is true in 2.7.0 as well. Running the certctl rehash brought it up to be able to upgrade.

@neuf_16 said in 2.7.2 Upgrade Issue (bug): @bmeeks Yes I am well aware that it is saying 2.7.0 in bold. That is why I created this post. You will also notice the second screenshot which says CURRENT Base System is already 2.7.2 Yes, I know that. But the very first words of your post said: I upgraded to 2.7.2. Not trying to be nit-picky, but rather just wanted to be sure you were aware the attempted upgrade was unsuccessful. If you had said "I attempted an upgrade to 2.7.2, but it failed" or something similar to that, there would have been no ambiguity. Not all posters here use English as their native language, and I've seen some misunderstandings/miscommunications about issues in the past due to that. Just clarifying the condition, not trying to be condescending or insulting. There are many, many posts here on the forum about similar issues. The Netgate team has been trying to make the pkg utility and upgrades in general more robust. But there are some apparent growing pains with that process. Look through all the similar posts and you should find a workable solution. Or you can save off your config.xml file and simply reinstall with a fresh pfSense 2.7.2 CE image file and then restore/recover you config.xml to bring back your firewall configuration.

hi @SteveITS Thank you I will try on the next allowable schedule for update

@SteveITS I solved with this https://forum.netgate.com/topic/184661/unable-to-upgrade-from-2-7-1-to-2-7-2-unmounting-boot-efi-done-failed/23

I even just tried doing an outbound NAT for the firewall and it didn't seem to help [image: 1703550463313-9b709ae6-6907-4076-a1aa-6d94785d064b-image.png] same thing when I try and ping out from it, 100% packet loss.

@michmoor TNX a milion your solution works fine. Many Many thanks! You saved me hours and hours to reinstall and reconfig everything. I love you!

@jimp said in 23.09.1 - pfsense-boot fails to upgrade: https://forum.netgate.com/post/1140955 This fixed my issue thanks @jimp

@old_man_noBS Tnx ! Worked like a charm.