https://www.netgate.com/blog/netgate-releases-pfsense-plus-software-version-23.09
We will be enabling the repos to present it as default shortly but it should be available to anyone to select manually right now.
Ok, I figured out what I did wrong.
I had mistakenly purchased a pfsense Plus + TAC Lite subscription via the store (looking for a place to enter my NID, but didn't see one and completed the checkout). I was emailed a token. This would work for a new install as their recent blog post explains: https://www.netgate.com/blog/netgate-pfsense-plus-tac-lite-available-for-129-per-year
Instead, I should have ordered the TAC Lite subscription itself from this link: https://shop.netgate.com/products/tac-lite-support (you can still use the TACLITE promo code for the same $ amount).
So I filed a ticket with Netgate Support with TAC Subscription as my issue category and explained this mix up and provided my NID in the ticket.
They responded within 20 minutes that they had updated the backend with my NID and the proper subscription and it would auto-update on my device my subscription. I received the same deal and no refund was necessary.
Hope this helps you @nouman786 and others who had the same experience.
Hmm, I no explanation as to why it would fail then succeed. I would expect it to either fail or succeed the same way every time.
23.01 is a special case. It was the first version to introduce dynamic package repos. As such everything on an earlier version has to update to 23.01 first and then to the current version.
Steve
Yup, that's the same EFI console issue. I believe there is a thread for that over in the Virtualisation sub. I personally don't have anything with hyper-V to test in.
@stephenw10
Thanks for your comment , your are correct regarding the image i used the serial image , i was think about last night and down loaded the VGA image , this worked a treat this morning. I was going to mark this as solved .
Thanks,
Mike
That would solve the problem, yes. It's probably easier than the multiple upgrade steps that would be required to upgrade from 2.3.3 anyway.
However one thing to be aware of here is that 2.3.3 supported 32bit hardware and 2.7 does not. So check that whatever you're running on is 64bit capable.
Steve
'Bad Request' like that means it's sending an invalid client cert. If you have not recently opened the gui run pfSense-repoc before running those pkg commands.
Steve
Solved:
I had a static DNS entry for ews.netgate.com to 127.0.0.1 added in the past to speedup dashboard loading time in case of internet down
Removed it, now I've started the upgrade
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.