Upload of firmware SW-21.0.0_GA.SFW-169.sig to Sophos XG SFVH fails

Hi 

I tried do upgrade my "SFVH_VM01_SFOS 20.0.2 MR-2-Build378" Sophos XG SFVH VM to XG 21 using the SIG-File SW-21.0.0_GA.SFW-169.sig from Sophos downloads.

The Upload starts and then I see a red message banner saying:

New firmware could not be uploaded. Please refer to online help for possible reasons

The "SFVH_VM01_SFOS 20.0.2 MR-2-Build378" was a fresh install from "VI-20.0.2_MR-2.VMW-378.zip" VMWare OVF. So this is the first upgrade.

When going to the console and do a 

SFVH_VM01_SFOS 20.0.2 MR-2-Build378# df -h
Filesystem Size Used Available Use% Mounted on
none 566.4M 38.7M 486.3M 7% /
none 2.9G 236.0K 2.9G 0% /dev
none 2.9G 49.6M 2.9G 2% /tmp
none 2.9G 14.6M 2.9G 0% /dev/shm
tmpfs 2.9G 0 2.9G 0% /sys/fs/cgroup
/dev/boot 126.2M 26.9M 96.6M 22% /boot
/dev/mapper/mountconf
 554.0M 89.2M 452.8M 16% /conf
/dev/content 11.8G 515.5M 11.3G 4% /content
/dev/var 70.7G 1.5G 69.2G 2% /var

So no space issue

ls -al /var/upload shows the SIG file appearing with the correct byte count. 
BTW, the SHA256 Hash is correct :-)

SFVH_VM01_SFOS 20.0.2 MR-2-Build378# ls -al
drwxr-xr-x 2 root root 4096 Nov 17 13:56 .
drwxr-xr-x 39 root root 4096 Nov 17 13:50 ..
-rw-r--r-- 1 root root 487961442 Nov 17 13:56 21b38a35-5ccf-406b-b719-bc407e518b1f.sig

fwmgmt log file shows

SFVH_VM01_SFOS 20.0.2 MR-2-Build378# less /log/fwmgmt.log
...
Sun Nov 17 12:56:21 2024Z [FWP0] read device bootdev name:'/dev/sda'
Sun Nov 17 12:56:21 2024Z Disk Sector Size is 512
Sun Nov 17 12:56:21 2024Z [FWP0] reading bootimginfo from disk
Sun Nov 17 12:56:21 2024Z binary called with below parameter:
loadfw -v -f /sdisk/fwimg -D -P /tmp/prexfile -o 2
Sun Nov 17 12:56:21 2024Z [FWP0] read disk information '/dev/sda'
Sun Nov 17 12:56:21 2024Z [FWP0] read device bootdev name:'/dev/sda'
Sun Nov 17 12:56:21 2024Z Disk Sector Size is 512
Sun Nov 17 12:56:21 2024Z [FWP0] reading bootimginfo from disk
Sun Nov 17 12:56:21 2024Z [FWP0] Extract/read firmware file '/sdisk/fwimg'

Using newest Microsoft Edge but also tried newest Google Chrome. 
Tried from Notebook, Desktop PC, Wired LAN, Wireless LAN.
Doesn't make a difference.

So, I am out of ideas why the appliance rejects the SIG-file.

Any ideas
Regards,

Oliver

Added TAGs
[edited by: Erick Jan at 1:30 AM (GMT -8) on 18 Nov 2024]