Users Guide

Usage
Information
This command verifies the signature of the OS10 image file using hash-based authentication, GNU privacy
guard (Gn uPG or GPG)-based signatures, or digital signatures (PKI-signed). For GPG validation, before
you validate the OS10 image, use the image gpg-key command to install the GPG key in the switch
keyring.
Example-sha256
OS10# image verify image://PKGS_OS10-Enterprise-10.4.9999EX.3342stretch-
installer-x86_64.bin pki signature tftp://10.16.127.7/users/PKGS_OS10-
Enterprise-10.4.9999EX.3342stretch-installer-x86_64.bin.sha256.base64
public-key tftp://10.16.127.7/users/DellOS10.cert.pem
Image verified successfully.
Example-GPG
key
OS10# image verify image://PKGS_OS10-Enterprise-10.4.9999EX.3342stretch-
installer-x86_64.bin gpg signature tftp://10.16.127.7/users/PKGS_OS10-
Enterprise-10.4.9999EX.3342stretch-installer-x86_64.bin.gpg
Example-PKI
OS10# image verify image://PKGS_OS10-Enterprise-10.4.9999EX.3342stretch-
installer-x86_64.bin pki signature tftp://10.16.127.7/users/PKGS_OS10-
Enterprise-10.4.9999EX.3342stretch-installer-x86_64.bin.sha256.base64
public-key tftp://10.16.127.7/users/DellOS10.cert.pem
Image verified successfully.
Supported
Releases
10.5.1.0 or later
image secure-install
Validates and installs the specified image.
Syntax
image secure-install image-filepath {sha256 signature signature-filepath |
gpg signature signature-filepath | pki signature signature-filepath public-
key key-file}
Parameters
● image-filepath—Enter the absolute path name of the OS10 image file.
● sha256 signature signature-filepath—Verify the SHA-256 cryptographic hash signature
of the image file.
● gpg signature signature-filepath—Verify the GNU privacy guard signature of the image
file.
● pki signature signature-filepath public-key key-file—Verify the PKI-signed
digital signature of the image file.
Default None
Security and
Access
Sysadmin
Command Mode EXEC
Usage
Information
This command is available only when you enable secure boot. This command is similar to the image
install command. The system, before installing the image, verifies the signature of the OS10 image file
using hash-based authentication, GNU privacy guard (Gn uPG or GPG)-based signatures, or digital
signatures (PKI-signed). For GPG validation, before you validate the OS10 image, use the image gpg-
key command to install the GPG key in the switch keyring.
Example - sha256
OS10# image secure-install image://PKGS_OS10-
Enterprise-10.4.9999EX.3342stretch-installer-x86_64.bin sha256 signature
tftp://10.16.127.7/users/PKGS_OS10-Enterprise-10.4.9999EX.3342stretch-
installer-x86_64.bin.sha256
Example - GPG
key
OS10# image secure-install image://PKGS_OS10-
Enterprise-10.4.9999EX.3342stretch-installer-x86_64.bin gpg signature
1148 Security