Reinstalling TippingPoint TPS Firmware via Failsafe Console
Purpose
This article outlines the procedure for reinstalling the TippingPoint Operating System (TOS) firmware on a TPS (Threat Protection System) device using the Failsafe console. This process is typically used to update Cold Spare units that are not licensed, skip directly to a specific TOS version instead of performing multiple upgrades, installing a TOS version older than what was received as an RMA, or to recover an unresponsive unit.
Prerequisites
- Access to the TPS serial console.
- An RJ45 serial console cable to USB or Serial for your computer.
- A serial console terminal emulator (e.g., PuTTY) configured to:
- Baud rate: 115200
- Data bits: 8
- Parity: None
- Stop bits: 1
- The TippingPoint OS Firmware Package, downloadable from the Trend Micro TMC.
- A web server (HTTP, SMB, or NFS) to host the TOS firmware package.
Procedure
- Connect the terminal emulator to the TPS device and power it on.
- When prompted, press Ctrl+H, Del, or Backspace within 5 seconds to enter the Failsafe console.
- At the prompt, type
install. - Follow the on-screen prompts to configure network settings:
- Choose between manual IP configuration or DHCP.
- If using manual configuration, set IP address, netmask, gateway, and DNS as needed.
- To avoid IP address conflicts it is best practice to use the actual details the unit will have when it is placed in service.
- Enter the URL to the firmware package (e.g.,
http://10.0.1.80/TPS.IPS.PHANTOM_6.5.0.14731.pkg).- For best results, connect the TPS directly to your laptop using adjacent IPs in the same subnet.
- A lightweight web server such as Fenix can be used on your local machine to host the firmware.
- Important: When prompted, answer YES to the question about using existing certificate keys.
Answering NO will render the unit permanently unserviceable and require replacement.
- The Failsafe console will retrieve the package and reformat the device.
- The unit will reboot automatically into the Out-of-Box Experience (OBE) configuration wizard.
- Complete the setup by entering the username and password
Important Notes
- Always verify the firmware package path and network configuration before proceeding.
- Use a direct connection to minimize network-related issues.
- Do not skip the certificate key confirmation step.