Users Guide

Example-sha256
OS10# image verify image://PKGS_OS10-Enterprise-10.4.9999EX.3342stretch-
installer-x86_64.bin pki signature tftp://10.16.127.7/users/PKGS_OS10-
Enterprise-10.4.9999EX.3342stretch-installer-x86_64.bin.sha256.base64
public-key tftp://10.16.127.7/users/DellOS10.cert.pem
Image verified successfully.
Example-GPG
key
OS10# image verify image://PKGS_OS10-Enterprise-10.4.9999EX.3342stretch-
installer-x86_64.bin gpg signature tftp://10.16.127.7/users/PKGS_OS10-
Enterprise-10.4.9999EX.3342stretch-installer-x86_64.bin.gpg
Example-PKI
OS10# image verify image://PKGS_OS10-Enterprise-10.4.9999EX.3342stretch-
installer-x86_64.bin pki signature tftp://10.16.127.7/users/PKGS_OS10-
Enterprise-10.4.9999EX.3342stretch-installer-x86_64.bin.sha256.base64
public-key tftp://10.16.127.7/users/DellOS10.cert.pem
Image verified successfully.
Supported
Releases
10.5.1.0 or later
image secure-install
Validates and installs the specified image.
Syntax
image secure-install image-filepath {sha256 signature signature-filepath |
gpg signature signature-filepath | pki signature signature-filepath public-
key key-file}
Parameters
● image-filepath—Enter the absolute path name of the OS10 image file.
● sha256 signature signature-filepath—Verify the SHA-256 cryptographic hash signature
of the image file.
● gpg signature signature-filepath—Verify the GNU privacy guard signature of the image
file.
● pki signature signature-filepath public-key key-file—Verify the PKI-signed
digital signature of the image file.
Default None
Security and
Access
Sysadmin
Command Mode EXEC
Usage
Information
This command is available only when you enable secure boot. This command is similar to the image
install command. The system, before installing the image, verifies the signature of the OS10 image
file using hash-based authentication, GNU privacy guard (Gn uPG or GPG)-based signatures, or digital
signatures (PKI-signed). For GPG validation, before you validate the OS10 image, use the image gpg-
key command to install the GPG key in the switch keyring.
Example - sha256
OS10# image secure-install image://
PKGS_OS10-Enterprise-10.4.9999EX.3342stretch-installer-x86_64.bin
sha256 signature tftp://10.16.127.7/users/PKGS_OS10-
Enterprise-10.4.9999EX.3342stretch-installer-x86_64.bin.sha256
Example - GPG
key
OS10# image secure-install image://
PKGS_OS10-Enterprise-10.4.9999EX.3342stretch-installer-x86_64.bin
gpg signature tftp://10.16.127.7/users/PKGS_OS10-
Enterprise-10.4.9999EX.3342stretch-installer-x86_64.bin.gpg
Example - PKI
signature
OS10# image secure-install image://
PKGS_OS10-Enterprise-10.4.9999EX.3342stretch-installer-x86_64.bin
pki signature tftp://10.16.127.7/users/PKGS_OS10-
1144 Security