Using SafeMode to Upgrade Firmware

If you are unable to connect to the SonicOS management interface, you can restart the SonicWall security appliance in SafeMode. The SafeMode feature allows you to quickly recover from uncertain configuration states with a simplified management interface that includes some of the functionality available in the DEVICE | Settings > Firmware and Settings page.

When you access the SafeMode interface in your browser, you will be prompted to enter the Maintenance Key for your appliance.

• In SonicOS 7.0.0, you must obtain the Maintenance Key from MySonicWall.
• In SonicOS 7.0.1, you can use the Auth Code as the key if your firewall is unregistered. The Auth Code is available on the label on the appliance bottom or in the SonicOS web management interface. After the appliance is registered, you will need to use the Maintenance Key, which is available from MySonicWall.

The SafeMode procedure uses a recessed reset button in a small pinhole, called the SafeMode button:

• On NSsp 13700 and NSa platforms, the Safemode button is near the X0 port and above the power button on the front of the appliance.
• On TZ platforms, the button is next to the power connection on the back of the appliance.

To obtain the Maintenance Key for your appliance

1. Log into your MySonicWall account at https://www.mysonicwall.com.
2. Navigate to Product Management > My Products and locate your firewall in the table.

3. Click on the serial number for your appliance to display a window frame with Product Details, Licenses, Firmware and Cloud Backup.

4. In the Product Details screen, move your mouse pointer over the "eye" icon next to Maintenance Key. The key value is displayed in a popup until you move your mouse. Make a note of the key.

   

To use SafeMode to upgrade firmware on a SonicWall security appliance

1. Do one of the following to connect your computer directly to the appliance:

   On a SonicWall NSsp 13700 or NSa, connect your computer to the MGMT port on the appliance and configure your computer with an IP address on the 192.168.1.0/24 subnet, such as 192.168.1.20.

   On a SonicWall TZ, connect your computer to the X0 port on the appliance and configure your computer with an IP address on the 192.168.168.0/24 subnet, such as 192.168.168.20.

2. Use a narrow, straight object, like a straightened paper clip or a toothpick, to press the SafeMode button. On a TZ, press and hold the SafeMode button for approximately 60 seconds. On an NSsp 13700 or NSa Series appliance, press the button, but you do not need to hold it down.

   The Test (wrench) LED starts blinking when the appliance has rebooted into SafeMode.

3. Do one of the following to access the SafeMode management interface:

   • On a SonicWall NSsp 13700 or NSa, point your browser to http://192.168.1.254.
   • On a SonicWall TZ, point your browser to https://192.168.168.168.

4. In the Maintenance Key prompt, type in or paste the key you got from MySonicWall and then click Authenticate. If your appliance is running SonicOS 7.0.1 and is not yet registered, use its Auth Code as the key.

   

   The SafeMode interface displays.

   

5. Click Upload Image, and then browse to the location where you saved the SonicOS firmware image, select the file, and click Upload.

6. Click the Boot button in the row for Available Image Version and select one of the following:

   • Boot Available Image with Current Configuration

     Use this option to restart the appliance with your current configuration settings.

   • Boot Available Image with Factory Default Configuration

     Use this option to restart the appliance with factory default configuration settings. The configuration settings revert to default values, but logs and local backups remain in place.

   • Boot Available Image with Backup Configuration

     Use this option to restart the appliance with saved backup configuration settings. You can choose which backup to use.

   

7. In the confirmation dialog, click Boot to proceed.
8. Wait while the firmware is installed, then booted.

9. After successfully booting the firmware, if the login screen is not displayed, point your browser to the firewall IP address. If you booted with factory default settings, the default IP address of the X0 interface is 192.168.168.168. Enter the default user name and password (admin / password) to access the SonicOS management interface.

   On a SonicWall NSsp 13700 or NSa, you can continue to manage the appliance from the MGMT interface at 192.168.1.254.

   On all SonicWall platforms, you can manage the appliance from the X0 interface, another LAN interface, or from a WAN interface, if configured.

10. To manage the appliance from an interface other than the one to which your computer is physically connected:

    1. Disconnect your computer from the appliance.

    2. Reconfigure your computer to automatically obtain an IP address and DNS server address, or reset it to its normal static values.

    3. Connect your computer to your network or to the desired interface on the appliance.

       If the appliance is managed from any interface other than the default LAN (X0) and the computer used to manage the appliance is set to automatically obtain an IP address and DNS server, a static or dynamic DHCP lease scope must be configured in SonicOS for that interface.

    4. Point your browser to the appropriate WAN or LAN IP address of the appliance.