Users Guide

tftp://10.16.127.7/users/PKGS_OS10-Enterprise-10.4.9999EX.3342stretch-
installer-x86_64.bin.gpg
Example - PKI
signature
OS10# image secure-install image://PKGS_OS10-
Enterprise-10.4.9999EX.3342stretch-installer-x86_64.bin pki signature
tftp://10.16.127.7/users/PKGS_OS10-Enterprise-10.4.9999EX.3342stretch-
installer-x86_64.bin.sha256.base64 public-key tftp://10.16.127.7/users/
DellOS10.cert.pem
Supported
Releases
10.5.1.0 or later
image gpg-key key-server
Installs the GPG key into the switch GPG key ring.
Syntax
image gpg-key key-server key-server-name key-id key-id-string
Parameters
● key-server-name—Hostname address of the GPG key server
● key-id-string—Key ID of the GPG key to be installed
Default None
Security and
Access
Sysadmin
Command Mode EXEC
Usage
Information
This command uses the key-server name and key-id to install the key into the switch GPG key ring.
Use this command before you use the image verify or image secure-install commands with
the GPG option. If the key is not installed in the key ring, the image verify and image secure-
install commands fail when used with the GPG key.
Example
OS10# image gpg-key key-server pool.sks-keyservers.net key-id 47CB9029
Supported
Releases
10.5.1.0 or later
Switch management access
OS10 provides security to all management access through console, Telnet, SSH connections, and SNMP requests.
SSH server
In OS10, the secure shell server allows an SSH client to access an OS10 switch through a secure, encrypted connection. The
SSH server authenticates remote clients using RADIUS challenge/response, a trusted host file, locally-stored passwords, and
public keys.
Configure SSH server
● The SSH server is enabled by default. You can disable the SSH server using the no ip ssh server enable command.
● Challenge response authentication is disabled by default. To enable, use the ip ssh server challenge-response-
authentication command.
● Host-based authentication is disabled by default. To enable, use the ip ssh server hostbased-authentication
command.
● Password authentication is enabled by default. To disable, use the no ip ssh server password-authentication
command.
● Public key authentication is enabled by default. To disable, use the no ip ssh server pubkey-authentication
command.
Security
1149