Cisco ASA 5585-X User manual

CHAPTER
4-1
Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide
OL-22567-02
4
Maintenance and Upgrade Procedures
This chapter describes maintenance and upgrade procedures, and includes the following sections:
•Removing and Installing SSPs, page 4-1
•Removing and Installing SSP Hard Disk Drives, page 4-4
•Installing and Removing Cisco ASA 5585-X Network I/O Modules, page 4-5
•Removing and Installing the Power Supply Module, page 4-11
•Removing and Installing the Fan Module, page 4-27
•Installing a Slide Rail Kit, page 4-29
•Installing and Removing a Slide-mounted Chassis, page 4-30
•Mounting the Chassis Using a Fixed Rack Mount, page 4-39
•Installing the Cable Management Brackets, page 4-41
•Troubleshooting Loose Connections, page 4-43
Removing and Installing SSPs
The ASA 5585-X comes with a core Security Services Processor (SSP) already installed (SSP-10,
SSP-20, SSP-40, or SSP-60). You can install an additional SSP (core SSP, IPS SSP, ASA CX SSP, or
FirePOWER SSP) in slot 1.
For a matrix describing which module configurations are allowed, see the ASA Module Compatibility
table.
Note Feature limitations may apply to dual SSPs. Refer to your configuration guide for more information.
The add-on SSP will not run without the core SSP installed. The add-on SSP must be installed in the
upper slot (slot 1), with the core SSP in the bottom slot (slot 0). You must power off the ASA 5585-X to
remove and install SSPs; the SSPs are not hot-swappable.

4-2
Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide
OL-22567-02
Chapter 4 Maintenance and Upgrade Procedures
Removing and Installing SSPs
To install and remove an add-on SSP in the ASA 5585-X, follow these steps:
Step 1 If you are replacing an existing SSP, shut it down first by entering the following CLI command;
otherwise continue with Step 3:
asa# hw-module module 1 shutdown
Shutdown module in slot 1? [confirm]
Note The core SSP resides in slot 0 (the bottom slot) while any additional SSP resides in slot 1 (the
top slot).
Step 2 Press Enter to confirm.
Step 3 Save the running config before powering off the ASA 5585-X or the configuration will be lost. Enter the
following CLI command:
asa# write memory
If you are using a management application such as ASDM or CSM to manage this ASA 5585-X, you
also can use that application to save the configuration.
Step 4 Power off the ASA 5585-X.
Step 5 Remove the power cable from the ASA 5585-X.
Step 6 If you are installing an add-on SSP for the fist time, loosen the captive screws on the upper left and right
of the slot tray (slot 1), and remove it. Store it in a safe place for future use. If you are replacing an
existing SSP, continue with Step 10.
Caution You must install slot trays in all empty slots to maintain the proper air flow. This also prevents EMI,
which can disrupt other equipment.
Step 7 On the front panel of the ASA 5585-X, loosen the captive screws from either the top slot (for the add-on
SSP), or bottom slot (for the core SSP).
1Slot tray
PWR
BOOT
ALARM
ACT
VPN
PS1
HDD1
PS0
HDD0
USB
RESET
0
SFP1 SFP0 1
01234567 MGMT
0
1
AUX CO NS OLE
254861
1

4-3
Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide
OL-22567-02
Chapter 4 Maintenance and Upgrade Procedures
Removing and Installing SSPs
Step 8 Grasp the ejection levers at the left and right bottom of the module slot and pull them out.
Step 9 Grasp the sides of the module and pull it all the way out of the chassis.
Step 10 Install the new module by lining it up with the slot. first ensuring the ejection levers are extended.
Step 11 Slide the module into the slot until it is seated and then push the ejection levers into place.
Step 12 Insert and tighten the captive screws.
Step 13 Reconnect the power cable to the ASA 5585-X.
Step 14 Power on the ASA 5585-X.
Step 15 Press Enter to confirm.
Step 16 Verify that the PWR indicator on the front panel is green.
1Module 2Ejection levers
1Module 2Ejection levers
PWR
BOOT
ALARM
ACT
VPN
PS1
HDD1
PS0
HDD0
USB
RESET
0
SFP1 SFP0 1
01234567 MGMT
0
1
AUX CONSOLE
253902
PWR
BOOT
ALARM
ACT
VPN
PS1
HDD1
PS0
HDD0
USB
RESET
0
SFP1 SFP0 101234567 MGMT
0
1
AUX CONSOLE
2
2
1
PWR
BOOT
ALARM
ACT
VPN
PS1
HDD1
PS0
HDD0
USB
RESET
0
SFP1 SFP0 1
01234567 MGMT
0
1
AUX CO NS OLE
253903
PWR
BOOT
ALARM
ACT
VPN
PS1
HDD1
PS0
HDD0
USB
RESET
0
SFP1 SFP0 101234567 MGMT
0
1
AUX CONSOLE
2
2
1

4-4
Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide
OL-22567-02
Chapter 4 Maintenance and Upgrade Procedures
Removing and Installing SSP Hard Disk Drives
Removing and Installing SSP Hard Disk Drives
The CX or FirePOWER SSP resides in slot 1 (the top slot) of the Cisco ASA 5585-X. The SSP includes
two hard disk drives in a RAID 1 configuration. If one of the hard disk drives fails, you can remove and
install a replacement.
Note Make sure that you replace the SSP hard disk drives with Cisco-approved hard disk drives.
Each hard disk drive is hot-swappable. The hard disk drive resides in a carrier, which you install into the
SSP’s hard disk drive bay. You can use the hard disk drive with an AC or DC power supply. Each hard
disk drive is shipped in a carrier, as shown in Figure 4-1.
Figure 4-1 SSP Hard Disk Drive in Carrier
Caution Make sure that you replace the failed hard disk drive as soon as possible; otherwise, if the remaining
hard disk drive fails, all data is lost.
To remove and install a hard disk drive in the SSP, follow these steps:
Step 1 From the front panel of the SSP, remove the hard disk drive by pressing the button on the right side of
the bay until the locking lever is released. Pull out the hard disk drive.
Step 2 On the front panel of the SSP, line up the hard disk drive carrier with the hard disk drive bay and push it
in until it is seated. Push the locking lever into place.
332634
PWR
BOOT
ALARM
ACT
VPN
PS1
HDD1
PS0
HDD0
USB
RESET
0
SFP1 SFP0 1
01234567 MGMT
0
1
AUX CO NS OLE
332632
PWR
BOOT
ALARM
ACT
VPN
PS1
HDD1
PS0
HDD0
USB
RESET
0
SFP1 SFP0 101234567 MGMT
0
1
AUX CONSOLE

4-5
Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide
OL-22567-02
Chapter 4 Maintenance and Upgrade Procedures
Installing and Removing Cisco ASA 5585-X Network I/O Modules
Step 3 On the front panel of the SSP, ensure the HDD1 (left hard disk drive) and HDD0 (right hard disk drive)
indicators are flashing green to indicate that the drives are active.
Installing and Removing Cisco ASA 5585-X Network I/O
Modules
The ASA 5585-X comes with a core Security Services Processor (SSP-10, SSP-20, SSP-40, or SSP-60)
already installed in slot 0. You can install one or two of the following optional network I/O modules in
slot 1, which you divide into two slots using the accompanying slot divider:
•Cisco ASA 5585-X 4-port 10-G Network I/O Module
•Cisco ASA 5585-X 8-port 10-G Network I/O Module
•Cisco ASA 5585-X 20-port 1-G Network I/O Module
The network I/O module is not hot-swappable, so you must power off the ASA 5585-X before installing
or removing the module. You must have a Phillips head screwdriver to install the slot divider that divides
slot 1 into two bays.
The ports are numbered right to left, with port 0 being the far right port and the far left port is either port
3, 7, or 19 depending on whether you have a 4-, 8-, or 20-port module. The 20-port numbers go from top
to bottom, and right to left. For slot 1 (top right slot), the interface is named TenGigabitEthernet 1/0
through TenGigabitEthernet 1/3. For slot 2 (top left slot) the interface is named TenGigabitEthernet 2/0
through TenGigabitEthernet 2/7.
PWR
BOOT
ALARM
ACT
VPN
PS1
HDD1
PS0
HDD0
USB
RESET
0
SFP1 SFP0 101234567 MGMT
0
1
AUX CONSOLE
332633
PWR
BOOT
ALARM
ACT
VPN
PS1
HDD1
PS0
HDD0
USB
RESET
0
SFP1 SFP0 101234567 MGMT
0
1
AUX CONSOLE

4-6
Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide
OL-22567-02
Chapter 4 Maintenance and Upgrade Procedures
Installing and Removing Cisco ASA 5585-X Network I/O Modules
Figure 4-2 shows the port numbering for the 4-port network I/O module.
Figure 4-2 4-Port Network I/O Module Port Numbering
Figure 4-3 shows the port numbering for the 8-port network I/O module.
Figure 4-3 8-Port Network I/O Module Port Numbering
1TenGigabitEthernet 00 through 03
2
310
Cisco ASA 4-Port 10GE Network Module
STATUS
EJECT
PWR
1
332446
1TenGigabitEthernet 00 through 07
2
310
6
754
STATUS
EJECT
PWR
Cisco ASA 8-Port 10GE Network Module
1
332447

4-7
Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide
OL-22567-02
Chapter 4 Maintenance and Upgrade Procedures
Installing and Removing Cisco ASA 5585-X Network I/O Modules
Figure 4-4 shows the port numbering for the 20-port network I/O module. For slot 0, the interface is
named GigabitEthernet 0/0 through GigabitEthernet 0/19.
Figure 4-4 20-Port Network I/O Module Port Numbering
Caution Be sure the ASA software version installed on your ASA 5585-X supports the network I/O modules and
the accompanying SFP/SFP+ transceivers. Refer to Cisco ASA Compatibility for more information.
Table 4-1 lists the SFP/SFP+ transceiver modules supported by the ASA 5585-X.
1GigabitEthernet 00 through 07 2GigabitEthernet 08 through 19
8
9
10
11
12
13
14
15
16
17
18
19 6
74
52
30
1
Cisco ASA 5585-X 20-Port GE Module
PWR STATUS
EJECT
1
2
332446
Table 4-1 SFP/SFP+ Transceiver Modules
1G SFP Module
GLC-SX-MM 1000 Base-SX SFP module
GLC-SX-MMD 1000BASE-SX short wavelength, with DOM
GLC-LH-SM 1000 Base-LX/LH SFP module
GLC-LH-SMD 1000BASE-LX/LH long-wavelength, with DOM
GLC-EX-SMD 1000 Base-EX SFP module, SMF, 1310nm, DOM
GLC-T 1000BASE-T standard
10G SFP+ Module
SFP-10G-ER 10G ER SFP+ module
SFP-10G-SR 10G SR SFP+ module
SFP-10G-LRM 10G LRM SFP+ module
SFP-10G-LR 10G LR SFP+ module
SFP-H10GB-ACU7M 10GBASE-CU SFP+ Cable 7 Meter, active
SFP-H10GB-ACU10M 10GBASE-CU SFP+ Cable 10 Meter, active

4-8
Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide
OL-22567-02
Chapter 4 Maintenance and Upgrade Procedures
Installing and Removing Cisco ASA 5585-X Network I/O Modules
Note These SFP+ modules require ASA 8.2.5 or later: SFP-10G-LRM, SFP-10G-LR, SFP-H10GB-CU1M,
SFP-H10GB-CU3M, and SFP-H10GB-CU5M.
Note Only SFP/SFP+ transceiver modules certified by Cisco are supported on the ASA 5585-X.
Caution Protect your SFP/SFP+ transceivers by inserting clean dust plugs into the SFP/SFP+ modules after
extracting cables from them. Be sure to clean the surfaces of the fiber-optic cables before you plug
them back into the optical bores of another SFP/SFP+ module. Avoid getting dust and other
contaminants into the optical bores of your SFP/SFP+ modules. The cables do not operate correctly
when obstructed with dust.
Warning Because invisible laser radiation may be emitted from the aperture of the port when no cable is
connected, avoid exposure to laser radiation and do not stare into open apertures. Statement 70
To install a 4-, 8-, or 20-port network I/O module and related SFP/SFP+ transceivers into the
ASA 5585-X:
Step 1 Power off the security appliance.
Caution Network I/O modules are not hot-swappable.
Step 2 Locate a grounding strap, and fasten it to your wrist so that it contacts bare skin. Attach the other end to
the chassis.
Step 3 Loosen the captive screws on the upper left and right of the top slot tray (slot 1), and remove it
(Figure 4-5). Store it in a safe place for future use.
Caution You must install slot covers on all empty slots to maintain the proper air flow. This also prevents EMI,
which can disrupt other equipment.
SFP-H10GB-CU1M 10GBASE-CU SFP+ cable 1 meter, passive
SFP-H10GB-CU3M 10GBASE-CU SFP+ cable 3 meter, passive
SFP-H10GB-CU5M 10GBASE-CU SFP+ cable 5 meter, passive
Table 4-1 SFP/SFP+ Transceiver Modules (continued)
1G SFP Module

4-9
Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide
OL-22567-02
Chapter 4 Maintenance and Upgrade Procedures
Installing and Removing Cisco ASA 5585-X Network I/O Modules
Figure 4-5 Removing the Empty Slot Tray
Step 4 Install the slot divider in the middle of slot 1 by lining up the groove on the top of the slot divider with
the inside track on the top of the security appliance and sliding it in until it is seated. Tighten the captive
screw with a Phillips head screwdriver (Figure 4-6).
Figure 4-6 Installing the Slot Divider
Step 5 Install a network I/O module by lining it up with either the left or the right bay of slot 1, making sure
the ejection levers are extended (Figure 4-7 and Figure 4-8 on page 4-10).
1Empty slot tray
PWR
BOOT
ALARM
ACT
VPN
PS1
HDD1
PS0
HDD0
USB
RESET
0
SFP1 SFP0 1
01234567 MGMT
0
1
AUX CONSOLE
254861
1
1Slot divider with captive screw
PWR
BOOT
ALARM
ACT
VPN
PS1
HDD1
PS0
HDD0
USB
RESET
0
SFP1 SFP0 1
01234567 MGMT
0
1
AUX CO NS OLE
331652
1

4-10
Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide
OL-22567-02
Chapter 4 Maintenance and Upgrade Procedures
Installing and Removing Cisco ASA 5585-X Network I/O Modules
Figure 4-7 Installing a 4- or 8-Port 10-G Network I/O Module
Figure 4-8 Installing a 20-Port 1-G Network I/O Module
Step 6 Slide the network module into the slot until it is seated and push the ejection levers back into place.
Step 7 With your fingers, tighten the captive thumb screws.
Step 8 If you are installing only one network I/O module, install a slot cover on the empty slot bay to protect it.
Caution You must install slot covers on all empty slots to maintain the proper air flow. This also prevents EMI,
which can disrupt other equipment.
Step 9 Install a SFP/SFP+ transceiver by aligning it with the I/O module port and sliding it into the port slot
until it locks into position (Figure 4-9).
Caution Do not remove the optical port plugs from the SFP/SFP+ until you are ready to connect the cabling.
14- or 8-port 10-G network module 2Ejection levers
3Slot 2 left bay 4Slot 1 right bay
PWR
BOOT
ALARM
ACT
VPN
PS1
HDD1
PS0
HDD0
USB
RESET
0
SFP1 SFP0 10123
4
567 MGMT
0
1
AUX CONSOLE
331651
1
2
4
2
3
120-port 1-G network I/O module 2Ejection levers
3Slot 2 left bay 4Slot 1 right bay
PWR
BOOT
ALARM
ACT
VPN
PS1
HDD1
PS0
HDD0
USB
RESET
0
SFP1 SFP0 101234567 MGMT
0
1
AUX CONSOLE
331867
1
24
23

4-11
Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide
OL-22567-02
Chapter 4 Maintenance and Upgrade Procedures
Removing and Installing the Power Supply Module
Figure 4-9 Installing the SFP/SFP+ Transceiver
Step 10 Remove the optical port plug, and then connect one end of an LC cable to the SFP/SFP+ transceiver
module (Figure 4-10).
Figure 4-10 Connecting the LC Cable
Step 11 Connect the other end of the LC cable to a network device, such as a router or a switch.
Step 12 After connecting all necessary cables, power on the security appliance.
Step 13 Verify that the PWR indicator on the front panel is green.
Removing and Installing the Power Supply Module
This section describes how to remove and install power supply modules in the ASA 5585-X, and
includes the following topics:
•AC/DC Power Supply Module Configurations, page 4-12
•AC Power Supply Module, page 4-12
•Removing and Installing an AC Power Supply Module, page 4-13
•DC Power Supply Module, page 4-16
•Installing the DC Power Supply Module, page 4-17
331653
331654

4-12
Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide
OL-22567-02
Chapter 4 Maintenance and Upgrade Procedures
Removing and Installing the Power Supply Module
•Connecting DC Power to the ASA 5585-X, page 4-19
•Removing the DC Power Supply Module, page 4-24
AC/DC Power Supply Module Configurations
Table 4-2 lists the AD/DC power supply module configurations for the ASA 5585-X.
AC Power Supply Module
The ASA 5585-X ships with one AC power supply module and one fan module installed, except for the
ASA 5585-X with SSP-60, which ships with two AC power supply modules installed in a load
balancing/sharing configuration. The load balancing/sharing configuration ensures that if one power
supply module fails, the other power supply module assumes the full load until the failed power supply
module is replaced. To maintain airflow, both bays must be populated by either an AC power supply
module and a fan module, or two AC power supply modules.
You can replace the fan module with a second AC power supply module in any of these models to create
a redundant power-supply configuration. If you already have two AC power supply modules installed,
you can install or replace either power supply module without powering off the appliance, as long as one
power supply module is active and functioning correctly.
If only one power supply module is installed, do not remove the power supply module unless the
appliance has been powered off. Removing the only operational power supply module causes an
immediate power loss.
Note Only the ASA 5585-X with SSP-60 supports either two AC or two DC power supply modules. Do not
mix AC and DC power supply modules in the same chassis.
Table 4-2 ASA 5585-X AC/DC Power Supply Module Configurations
Model AC Configuration DC Configuration
Option 1 Option 2 Only Option
SSP-10 Two AC power supply modules One AC power supply module
One fan module
Two DC power supply modules
SSP-20 Two AC power supply modules One AC power supply module
One fan module
Two DC power supply modules
SSP-40 Two AC power supply modules One AC power supply module
One fan module
Two DC power supply modules
SSP-60 Two AC power supply modules N/A Two DC power supply modules

4-13
Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide
OL-22567-02
Chapter 4 Maintenance and Upgrade Procedures
Removing and Installing the Power Supply Module
Figure 4-11 shows the AC power-supply module indicator lights.
Figure 4-11 AC Power Supply Module Indicator Lights
Table 4-3 describes the AC power supply module indicators.
Removing and Installing an AC Power Supply Module
Caution If you remove a power supply or fan module, replace it immediately to prevent disruption of service.
Caution If the appliance is subjected to environmental overheating, it shuts down and you must manually power
cycle it to turn it on again.
Cisco ASA 1200W AC
100-240V
15.0/8.0.A
56/60Hz
IN
OK
FAN
OK
OUT
FAIL
253905
1 2 3
Table 4-3 AC Power Supply Module Indicators
Figure
Label Indicator Description
1IN OK Status of the power supply module:
•Off—No AC power cord connected, or AC power switch is off.
•Green—AC power cord connected and AC power switch is on.
2FAN OK Status of the fan module
•Off—Fan module failure, or AC power switch is off.
•Green—AC power cord connected, AC power switch is on, and internal fan
is running.
3OUT FAIL •Red—Output voltage failure1
1. The power supply module has three output voltages—3.3V, 12V, and 50V.

4-14
Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide
OL-22567-02
Chapter 4 Maintenance and Upgrade Procedures
Removing and Installing the Power Supply Module
Caution To remove and install a power supply module, follow these steps:
Step 1 If you are removing the only power supply module, power off the security appliance.
Step 2 From the back panel of the security appliance, unplug the power supply module cable.
Step 3 On the back of the security appliance, loosen the captive screws from the power supply module
(Figure 4-12).
Figure 4-12 Removing the AC Power Supply Module
Step 4 Remove the power supply module by grasping the handle and pulling the power supply module away
from the chassis.
1Power supply module and power
supply module handle
2Power supply module screws
Cisco-ASA-FAN
Cisco ASA 1200W AC
100-240V
15.0/8.0.A
56/60Hz
IN
OK
FAN
OK
OUT
FAI L
Cisco ASA 1200W AC
100-240V
15.0/8.0.A
56/60Hz
IN
OK
FAN
OK
OUT
FAI L
253970
2
1
2

4-15
Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide
OL-22567-02
Chapter 4 Maintenance and Upgrade Procedures
Removing and Installing the Power Supply Module
Step 5 Install the new power supply module by aligning it with the power supply module bay and pushing it
into place until it is seated (Figure 4-13).
Figure 4-13 Installing the AC Power Supply Module
Step 6 Tighten the captive screws.
Step 7 Reconnect the power cable. If you are installing two power supply modules for a redundant configuration
(Figure 4-14), plug each one into a power source—we recommend a UPS.
Figure 4-14 PS0 and PS1
Step 8 If you had to power off the security appliance because you are removing and replacing the only power
supply module, power it back on.
Step 9 Check the PS0 and PS1 indicators on the front panel to make sure they are green. On the back panel of
the security appliance, make sure the IN OK and the FAN OK indicators are green and the OUT FAIL
indicator is off (see Figure 4-11and Table 4-3).
1Power supply module and power
supply module handle
2Power supply module screws
INPUT OUTPUT
FAN
Cisco-ASA-FAN
Cisco ASA 1200W AC
100-240V
15.0/8.0.A
56/60Hz
IN
OK
FAN
OK
OUT
FAIL
Cisco ASA 1200W AC
100-240V
15.0/8.0.A
56/60Hz
IN
OK
FAN
OK
OUT
FAIL
253971
2
1
2
1Power supply module (PS0) 2 Power supply module (PS1)
Cisco ASA 1200W AC
100-240V
15.0/8.0.A
56/60Hz
IN
OK
FAN
OK
OUT
FAIL
Cisco ASA 1200W AC
100-240V
15.0/8.0.A
56/60Hz
IN
OK
FAN
OK
OUT
FAIL
1 2

4-16
Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide
OL-22567-02
Chapter 4 Maintenance and Upgrade Procedures
Removing and Installing the Power Supply Module
DC Power Supply Module
The ASA 5585-X ships with two DC power-supply modules installed in a load balancing/sharing
configuration. This is the only supported DC power-supply module configuration. The load
balancing/sharing configuration ensures that if one DC power supply module fails, the other DC power
supply module assumes the full load until the failed power-supply module is replaced. To maintain air
flow, both bays must be populated by two DC power-supply modules.
You can install or replace either power-supply module without powering off the appliance, as long as
one power-supply module is active and functioning correctly.
Note Only the ASA 5585-X SSP-60 supports either two AC or two DC power-supply modules. Do not mix
AC and DC power-supply modules in the same chassis.
Figure 4-15 shows the DC power-supply module indicator lights and power-switch labels.
Figure 4-15 DC Power Supply Module Indicator Lights and Power Switch Labels
334553
231
4 5
1150W DC

4-17
Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide
OL-22567-02
Chapter 4 Maintenance and Upgrade Procedures
Removing and Installing the Power Supply Module
Table 4-4 describes the DC power-supply module indicators and power-switch position labels.
Installing the DC Power Supply Module
The DC power-supply module has a 1150-W output with three DC voltage outputs of 50 V, 12.25 V, and
3.35 V. The module operates between -40.5 to -72 VDC. The power-supply module shares current on the
50V and 12.25 V outputs, and can only be used in a dual (redundant) hot-pluggable configuration. The
DC power-supply module operates from a single 40 A DC input circuit with at full output load of 1150
W, -40.5 VDC input, and does not exceed 33 A.
To install a DC power-supply module in the ASA 5585-X, follow these steps:
Step 1 Remove existing modules from the appliance:
a. If you are replacing AC power with DC power, remove both modules from the appliance (fan module
and power supply module, or both power supply modules) as shown in Step 1 through Step 4 in
Removing and Installing an AC Power Supply Module, page 4-13. Continue with Step 2.
b. If you are replacing a failed DC power-supply module with a new DC power-supply module, follow
the steps in Removing the DC Power Supply Module, page 4-24, and then continue with Step 2.
Table 4-4 DC Power Supply Module Indicators
Figure
Label Indicator Description
1IN OK Status of power-supply module:
•Unlit—No DC power cables connected, or DC power switch is off.
•Green—DC power cables connected and DC power switch is on.
2FAN OK Indicates status of fan module
•Unlit—Fan module failure, or DC power switch is off.
•Green—DC power cables connected, DC power switch is on, and internal
fan is running.
3OUT FAIL •Red—Output voltage failure1
1. The power-supply module has three output voltages—3.35 V, 12.5 V, and 50 V.
4ON •When this side of power switch is depressed, power is on.
5STANDBY •When this side of power switch is depressed, device is in stand-by mode.

4-18
Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide
OL-22567-02
Chapter 4 Maintenance and Upgrade Procedures
Removing and Installing the Power Supply Module
Step 2 Install the new power-supply module by aligning it with the power-supply module bay and pushing it
into place until it is seated (Figure 4-16).
Figure 4-16 Installing the DC Power Supply Module
Step 3 Tighten the captive screws.
Step 4 Repeat Steps 2 and 3 to install the second power-supply module.
Note You must have two DC power-supply modules installed at all times.
Step 5 Connect DC power source by following the steps in Connecting DC Power to the ASA 5585-X,
page 4-19.
1Power-supply module screws 2Power-supply module and module handle
2 1
1
334517
1150WDC
1150WDC

4-19
Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide
OL-22567-02
Chapter 4 Maintenance and Upgrade Procedures
Removing and Installing the Power Supply Module
Connecting DC Power to the ASA 5585-X
This section describes how to connect DC power to the Cisco ASA 5585-X, and contains the
following topics:
•Prerequisites, page 4-19
•Connecting the DC Power Supply, page 4-20
Prerequisites
Caution Before you connect the power supply module to a power source, be sure the chassis is properly grounded.
Use the following tools and parts to connect the DC power-supply module:
•5/16-inch nut-driver
•M4 nut-driver
•Source DC cable lugs with the following requirements:
– Two holes with 0.62±0.02-inch spacing between the hole centers to accommodate the
power-supply terminal posts.
– A 90-degree bend in the barrel to allow the source DC cables to exit the terminal block.
•Source DC ground wire lugs with the following requirements:
•A single hole that can accommodate the 4-mm ground post.
•Either a straight or bent barrel.
Note The source DC cable and the terminal block lugs should be sized according to local and
national installation requirements and electrical codes. Use only copper wire. We
recommend FCI Burndy type YA4CL-2TC10-90 and Panduit type LCD10-10AF-L
dual-hole 90 degree lugs, or the equivalent.
Note These parts and tools are not supplied as part of the chassis accessory kit or the DC
power-supply module kit. You must purchase them separately.
Table 4-5 shows the source DC cable and ground cable-lug tightening torque ratings.
Warning Before performing any of the following procedures, ensure that power is removed from the DC circuit.
Statement 1003 .
Table 4-5 Lug Torque Ratings
Lug Maximum Torque Recommended Torque
Source DC cable lugs 4.07Nm 2.5Nm
Source DC ground cable lugs 2.5Nm 2Nm

4-20
Cisco ASA 5585-X Adaptive Security Appliance Hardware Installation Guide
OL-22567-02
Chapter 4 Maintenance and Upgrade Procedures
Removing and Installing the Power Supply Module
Warning This unit is intended for installation in restricted-access areas. A restricted-access area can be
accessed only through the use of a special tool, lock and key, or other means of security.
Statement 1017
Warning This product requires short-circuit (overcurrent) protection, to be provided as part of the building
installation. Install only in accordance with national and local wiring regulations. Statement 1045
Warning Hazardous voltage or energy may be present on DC power terminals. Always replace cover when
terminals are not in service. Be sure uninsulated conductors are not accessible when cover is in
place. Statement 1075
More Information
For the procedure for connecting the system ground, see Establishing the System Ground, page 3-1.
Connecting the DC Power Supply
To connect source DC to the DC-input power supply, follow these steps:
Step 1 Set the power switch or circuit breaker to the off (0) position on the source DC circuit that feeds the
power supply you are installing.
As an added precaution, place the appropriate safety flag and lock-out devices at the source-power
circuit breaker, or place a piece of adhesive tape over the circuit breaker handle to prevent accidental
power restoration while you are working on the circuit.
Step 2 Verify that the power switch on the power supply you are installing is in the STANDBY ( ) position.