If you are running 12.1 or early 12.2, you upgrade the bootloader first. Use the (upgrade-helper) method or use the archive download-sw command.
The SE11 release addresses various vulnerabilities, making it essential for maintaining a secure network posture. c3560ipservicesk9mz1502se11bin upd
Before proceeding with the update, ensure that: If you are running 12
32768K bytes of flash-simulated non-volatile configuration memory. (Confirms 32 MB Flash). 131072K bytes of memory. (Confirms 128 MB DRAM). 3. Step-by-Step Upgrade Procedure c3560ipservicesk9mz1502se11bin upd
Even with a straightforward process, things go wrong. Here are the top three failure modes and solutions:
Note: SE11 fixes several vulnerabilities and bugs from earlier SE trains (e.g., CDP issues, memory leaks).