Step by Step guide to upgrade Cisco ASA IOS and ASDM Version

Important: Even though below steps are common to upgrade any version of Cisco ASA IOS and ASDM, you need to verify in website to understand the vendor recommended upgrade path. Below is the step by step guide to upgrade Cisco ASA IOS version from 8.6(1)2 to 9.1(2).

Refer Cisco recommended upgrade path for Cisco ASA  IOS Version

(config)# show version
Cisco Adaptive Security Appliance Software Version 8.6(1)2
Device Manager Version 6.6(1)
Compiled on Fri 01-Jun-12 02:16 by builders
System image file is “disk0:/asa861-2-smp-k8.bin”
Config file at boot was “startup-config”

so, our upgrade path is as follows

first upgrade 8.6(1) to 9.0(2) and finally to 9.1(2), simultaneously we will upgrade our ASDM version to 7.1(5) that supports 9.1(2) version of IOS

Upgrade ASA version from 8.6(1)2 to 9.0(2)

Note: No need to upgrade ASDM version at this stage as we still need to upgrade to our final version 9.1(2) so we can upgrade ADSM at the later stage.

Step 1: Verify that you have enough disk space in Cisco ASA to load new bin, I have 3.7 Gbytes space, so no worries!
Note: Use for bytes conversion


Step 2: Download following versions from (you need a smartnet login!)

  • Download 9.0(2) and 9.1(2) version of IOS
  • Download 7.1(5) version of ASDM

Step 3: Download and setup TFTP server from

Step 4: Upload 9.0(2) version to ASA via tftp server
(config) # copy tftp: disk0:
Run ‘show disk0:‘ command to verify that bin is copied to ASA


Step 5: Set ASA to boot with new image 9.0(2) when it is rebooted next time (don’t forget to save the image!).
(config)# boot system disk0:/asa902-10-smp-k8.bin
(config)# wr mem
(config) # reload


Step 6: Once ASA started operating, run ‘Show Version‘ and verify that the running IOS version is 9.0(2)

Upgrade ASA version from 9.0(2) to 9.1(2)  and ASDM version to 7.1(5)

Note: Nothing new, except we are going to upload latest ASDM version

Step 1: Upload 9.1(2) version to ASA via tftp server


Step 2: Upload ASDM 7.1(5) version to ASA via tftp server


Step 3: Set ASA to boot with new image 9.1(2) and also ASDM with 7.1(5) when it is rebooted next time (don’t forget to save the image!).

(config)# boot system disk0:/asa912-smp-k8.bin

(config)# asdm image disk0:/asdm-715.bin


Step 4: Verify that the loaded version is 9.1(2) and then We are done!

Leave a Reply