Users Guide

Supported
Releases
10.5.1.0 or later
image secure-install
Validates and installs the specified image.
Syntax
image secure-install image-filepath {sha256 signature signature-filepath |
gpg signature signature-filepath | pki signature signature-filepath public-
key key-file}
Parameters
● image-filepath—Enter the absolute path name of the OS10 image file.
● sha256 signature signature-filepath—Verify the SHA-256 cryptographic hash signature
of the image file.
● gpg signature signature-filepath—Verify the GNU privacy guard signature of the image
file.
● pki signature signature-filepath public-key key-file—Verify the PKI-signed
digital signature of the image file.
Default None
Security and
Access
Sysadmin
Command Mode EXEC
Usage
Information
This command is available only when you enable secure boot. This command is similar to the image
install command. The system, before installing the image, verifies the signature of the OS10 image file
using hash-based authentication, GNU privacy guard (Gn uPG or GPG)-based signatures, or digital
signatures (PKI-signed). For GPG validation, before you validate the OS10 image, use the image gpg-
key command to install the GPG key in the switch keyring.
Example - sha256
OS10# image secure-install image://PKGS_OS10-
Enterprise-10.4.9999EX.3342stretch-installer-x86_64.bin sha256 signature
tftp://10.16.127.7/users/PKGS_OS10-Enterprise-10.4.9999EX.3342stretch-
installer-x86_64.bin.sha256
Example - GPG
key
OS10# image secure-install image://PKGS_OS10-
Enterprise-10.4.9999EX.3342stretch-installer-x86_64.bin gpg signature
tftp://10.16.127.7/users/PKGS_OS10-Enterprise-10.4.9999EX.3342stretch-
installer-x86_64.bin.gpg
Example - PKI
signature
OS10# image secure-install image://PKGS_OS10-
Enterprise-10.4.9999EX.3342stretch-installer-x86_64.bin pki signature
tftp://10.16.127.7/users/PKGS_OS10-Enterprise-10.4.9999EX.3342stretch-
installer-x86_64.bin.sha256.base64 public-key tftp://10.16.127.7/users/
DellOS10.cert.pem
Supported
Releases
10.5.1.0 or later
image gpg-key key-server
Installs the GPG key into the switch GPG key ring.
Syntax
image gpg-key key-server key-server-name key-id key-id-string
Parameters
● key-server-name—Hostname address of the GPG key server
● key-id-string—Key ID of the GPG key to be installed
Default None
Security 1361