CE to Plus - Unable to check for updates

[bingo600]

I had a pfSense Major Crash during the easter vacation.
Were off-site, and came back today ...
Suspect power-failure as trigger (prob. cleaning lady)

Trying to boot w. HDMI Screen attached , and the Qotom "gave all kind of ZFS errors".

SWMBO - Wanted to see TV , so i took my Hystou/Protecli and started that one.
The Hystou was already "quite up2date", as i did the 23.01 upgrade on that one as a "test", before upgrading the Qotom.
SWMBO happy ==> I'm happy

Restoring Qotom:
Well took a 2.6.0 CE , and installed. No biggie , pfSense came up as easy as usual.
After a while ... maybe 1h or so , I decided to upgrade to 23.01 in GUI.
Absolutely no issue - Detected the 23.01 immediately , and began to upgrade.

But then i looked at the console ....

And after a a bit more time the upgrade also "barfed" in the GUI.

Well i decided NOT to trust that disk anymore, and swapped my "Not so old" - 250G EVO870 Sata SSD - For another Samsung 240GB SSD, but this time a "Server Grade Disk".

Redid the 2.6.0 CE install , and "Hoped i was the PUNK who feel lucky" ... But no.
When trying to upgrade to Plus i get the dreaded : Unable to check for updates

If i try via CLI i get this : "Auth error" & other stuff ...

I'm so glad i had my backup box (Hystou) ready to deploy.
The most impatient important customer (SWMBO), would not have been happy with 3h+ downtime.

I have to admit the new install has only been up for 30 min, but what are the parameters for updating from CE to Plus successfully quickly ???

I would like to understand the pre-reqs of a successful access to the 23.01 upgrade repos, if possible ?

Do you run some kind of "Allow upgrade" batch job every hour or ?
My NDI is known , and was used for an upgrade attempt less than an hour before.

I just checked now - pfSense uptime is 1h , still fails at upgrading to plus

Edit:
Thanx for the 2.6.0 to "latest Plus" upgrade possibility

Edit2:

I see these too: - Cert errors

Enter an option: 13

>>> Updating repositories metadata... 
pkg-static: Warning: Major OS version upgrade detected.  Running "pkg bootstrap -f" recommended
Updating pfSense-core repository catalogue...
Could not load client certificate /etc/ssl/pfSense-repo-custom.cert
Could not load client certificate /etc/ssl/pfSense-repo-custom.cert
Could not load client certificate /etc/ssl/pfSense-repo-custom.cert
Could not load client certificate /etc/ssl/pfSense-repo-custom.cert
pkg-static: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_01_amd64-core/meta.txz: Authentication error

Could this be it ?
https://forum.netgate.com/post/1058595

You are trying to upgrade from CE to Plus here?

Did you also just reinstall?

You might need to open a ticket and ask to have your NDI bumped. Or just wait 24hrs. There's a limit to the number of times the server will hand out certificates, you may have exhausted it.

Steve

@stephenw10
Since my first install crashed w. a bad hdd , could i have exhausted the Netgate Cert Server ?? - I just failed once

TIA
/Bingo

[rcoleman-netgate]

@bingo600 said in CE to Plus - Unable to check for updates:

@stephenw10
Since my first install crashed w. a bad hdd , could i have exhausted the Netgate Cert Server ?? - I just failed once

Open a ticket with your NDI and we'll bounce that cert for you (if that is the issue).

Worth noting the problems you have with your QOTOM matches my own experiences in 2016 with them. I scrapped them all as soon as I could manage it.
-Ryan

[bingo600]

@rcoleman-netgate said in CE to Plus - Unable to check for updates:

@bingo600 said in CE to Plus - Unable to check for updates:

@stephenw10
Since my first install crashed w. a bad hdd , could i have exhausted the Netgate Cert Server ?? - I just failed once

Open a ticket with your NDI and we'll bounce that cert for you (if that is the issue).

I have just been able to upgrade now.
So my money is on exhausting the SSL Cert server.

Why is there such a low limit on the cert server ??

Worth noting the problems you have with your QOTOM matches my own experiences in 2016 with them. I scrapped them all as soon as I could manage it.

Well to be fair i think the Qotom is "innocent" , it has been running flawlessly since 2017.

But I have had ntopng permanently active, and my guess is that it has worn out the SSD disk.
I should not have used a "consumer" ssd with that amount of logging.
I have stopped running ntopng permanently active.

And have changed to a server grade SSD.

Thank you for the answer Ryan, and offer to contact TAC.

But this experience worries me a bit, wrt. switching my work boxes to Plus.
At least until i can buy a "whitebox" subscription, and get access to the Plus image via TAC.

My next prod boxes will likely be Netgate, but bean counters ......

/Bingo