The error is a known issue within Cisco Catalyst Center (formerly DNA Center) that occurs when the system fails to download an image or its associated metadata (like the ISSU Compatibility Matrix) from Cisco.com. The specific "invalid metadata trans-id" typically indicates a failure in the API transaction between your controller and Cisco's automated software distribution backend . Common Causes
If the above fails, use this reliable workaround:
The Cisco Catalyst Center error is a critical Software Image Management (SWIM) failure that halts automated network operating system upgrades. This problem occurs when Cisco Catalyst Center (formerly DNA Center) fails to parse or receive the ISSU Compatibility Matrix ( comp_matrix.xml ) metadata . Even if the main binary operating system file downloads successfully, an invalid or missing transaction ID halts the entire routine. The error is a known issue within Cisco
| | Action Items | | :--- | :--- | | Maintain Network & Server Health | Ensure stable internet connectivity and DNS resolution to cisco.com . Verify any proxies or firewalls allow outbound HTTPS (TCP 443) to Cisco's servers. | | Keep Licenses Compliant | Regularly monitor your Cisco Smart Licensing status. Ensure your devices, especially NCS routers, are in compliance to prevent SIA-related blocks. | | Adhere to Official Upgrade Paths | Always follow Cisco's documented software upgrade procedures for your specific device and software version. Review the "Setup and Software Installation Guide" for your product before starting a major upgrade. | | Consider Platform-Specific Guidance | For Cisco Optical Site Manager (COSM) and NCS 1000 devices, familiarize yourself with the official upgrade workflow, which often uses the Device Software tab to download packages after software is already staged. |
Let’s explore why the transaction ID would be deemed invalid. Understanding these causes is the key to resolution. This problem occurs when Cisco Catalyst Center (formerly
: Misconfigured proxies or proxies that bypass certain authentication steps may interfere with the download process. Recommended Workarounds
Less than 5 seconds difference from pool.ntp.org . Verify any proxies or firewalls allow outbound HTTPS
: A documented defect in Cisco DNA Center versions 2.2.3.x, 2.3.3.x, and 2.3.4.x where the core image file downloads successfully, but the accompanying ISSU compatibility matrix fails due to metadata discrepancies.
Use the CLI to test connectivity to cloudsso.cisco.com and software.cisco.com .