UniFi - How do I ssh update the firmware

[TwistedHelixis]

Just tried to update one of our UniFI AP's (basic version) using the installed console and it didn't work. I now have adopt & update listed for that AP. The adoption seems to work but not the firmware update. I also tried putting the unit back to it's defaults (pin in for 10 seconds) but end up back at the same point.

 

So I think I need to ssh onto the AP. I have downloaded some ssh software, but the very very basic help info on Ubiquiti says to enter the url for the firmware update, which should end in .bin

 

Not sure I am even looking at the correct help page. Did find something about the process changing at some point, so I am ignoring older web info.

 

How do I find this URL?

 

This is the update page - https://www.ui.com/download/unifi/unifi-ap/uap/unifi-firmware-4054-uap-uap-lr-uap-od-uap-od5

 

But none of the links on that page (or the URL) look anything like the URL I think I need.

[sted]

i think the url you want is the ip of the access point youre dealing with

[TwistedHelixis]

i think the url you want is the ip of the access point youre dealing with

Currently just reading the basic help, which goes like....

 

1. connecting to the AP - will use the IP.

2. use some cmd to download the firmware .bin file

 

It's 2 I am trying to work out.

[IrritableTech]

You'll need to SSH into the AP using your credentials (which may be found in the controller under Settings, Site, Shh authentication (click the eyeball icon)).

 

Once connected to the AP run

 

upgrade https://dl.ui.com/unifi/firmware/BZ2/4.0.54.10625/BZ.ar7240.v4.0.54.10625.190801.1544.bin

 

I got this URL by clicking download in my browser, then agreeing to the EULA. After that it shows you the direct link to the bin.

 

Edited September 20, 2019 by IrritableTech

[TwistedHelixis]

Thanks for the help. upgrade worked and now adopted.

 

For anyone else - I needed to remove the S from https for it to work

[TwistedHelixis]

You'll need to SSH into the AP using your credentials (which may be found in the controller under Settings, Site, Shh authentication (click the eyeball icon))

Although the update did work, the only way I could connect to the AP was by resetting it first, I was getting permission denied otherwise.

 

Now I have a bit of time, I think that the AP's must have been setup using another password (not sure) although everything was fine before I upgraded the controller software. Anyway when I go into Settings, Site, I do not see ssh auth or an eyeball icon. I am on controller 5.11.46.

 

Also I thought that resetting the AP would result in using the current controller password after adoption, but that does not seem to be the case.

[IrritableTech]

Although the update did work, the only way I could connect to the AP was by resetting it first, I was getting permission denied otherwise.

Now I have a bit of time, I think that the AP's must have been setup using another password (not sure) although everything was fine before I upgraded the controller software. Anyway when I go into Settings, Site, I do not see ssh auth or an eyeball icon. I am on controller 5.11.46.

Also I thought that resetting the AP would result in using the current controller password after adoption, but that does not seem to be the case.

 

Older controller software set the username and password on the AP to the one used by the single user in the controller software. At some point in the past Unifi updated it so the SSH password was different from the controller user password and saved this in the console.

 

Do you have a tick box available for SSH Authentication at the bottom of the Settings - Site page?

 

When you reset an AP and it is waiting for adoption, the usual default username and password of ubnt applies I believe.

[TwistedHelixis]

Do you have a tick box available for SSH Authentication at the bottom of the Settings - Site page?

No, although I notice a box to set enable advanced features that is not ticked. When I go to tick this I get a long list of warnings about losing connection to the APs, so clicked cancel.

 

When you reset an AP and it is waiting for adoption, the usual default username and password of ubnt applies I believe.

Yep, I can access using ssh immediately after resetting, but then it adopts with the controller and changes the APs password, this then means I cant use the controller to deploy any future firmware updates and I will need to reset the AP again.

[TwistedHelixis]

OK so I just tied to tick the advances features box and got an error about unsupported devices, I assume I'll need to reset & ssh all our APs first then.

[TwistedHelixis]

All fixed

 

Fasted way I could think of was to click forget device, this seemed to reset the AP without needing any password (saved me a walk) and then I could ssh the firmware onto the remain APs, after that I could tick the advanced features box and then update the device passwords. Phew.

[IrritableTech]

All fixed

Fasted way I could think of was to click forget device, this seemed to reset the AP without needing any password (saved me a walk) and then I could ssh the firmware onto the remain APs, after that I could tick the advanced features box and then update the device passwords. Phew.

Glad to hear you got it sorted.