Ensure the appliance can actually reach the metadata endpoints:

If the automated download fails, the most reliable fix is to manually upload the image:

Sometimes the token between your appliance and Cisco's servers becomes "invalid": Go to .

Remove the existing account and re-add it using your Cisco Smart Account credentials. 3. Update the Trustpool

In Catalyst Center, navigate to Design > Image Repository and use the Import function to upload the file from your local machine.

Check if there is a pending update for the Cisco Trustpool and apply it to restore secure communications. 4. Verify Proxy and Connectivity

Metadata downloads require valid root certificates to verify Cisco's servers: Navigate to .

Cisco released Field Notice FN74033 , stating that older versions of DNA Center will fail to download metadata after , due to certificate changes. If you are on an older release, an upgrade to a fixed version (e.g., 2.3.5.x or later) is required. Comparison of Solution Paths Effectiveness When to Use Manual Import Urgent upgrades or persistent API errors. Credential Refresh Authentication or account permission issues. Trustpool Update Certificate or SSL handshake failures. Software Upgrade For long-term fixes of known bugs (e.g., CSCwd15921).