Users Guide

Default Disabled
Security and
Access
Sysadmin
Command Mode CONFIGURATION
Usage
Information
If you enable secure boot, ensure that you manually protect the startup configuration file before you
reload the switch. The protected version of the startup configuration file is applied during the boot up
process. If a protected version of the startup configuration file is not available, the system applies the
default configuration.
The no version of this command removes the configuration.
Example
OS10# secure-boot enable
Supported
Releases
10.5.1.0 or later
image verify
Verifies the OS10 image file using sha256, PKI, or GPG signatures.
Syntax
image verify image-filepath {sha256 signature signature-filepath | gpg
signature signature-filepath | pki signature signature-filepath public-key
key-file}
Parameters
● image-filepath—Enter the absolute path name of the OS10 image file.
● sha256 signature signature-filepath—Verify the SHA-256 cryptographic hash signature
of the image file.
● gpg signature signature-filepath—Verify the GNU privacy guard signature of the image
file.
● pki signature signature-filepath public-key key-file—Verify the PKI-signed
digital signature of the image file.
Default None
Security and
Access
Sysadmin
Command Mode EXEC
Usage
Information
This command verifies the signature of the OS10 image file using hash-based authentication, GNU privacy
guard (Gn uPG or GPG)-based signatures, or digital signatures (PKI-signed). For GPG validation, before
you validate the OS10 image, use the image gpg-key command to install the GPG key in the switch
keyring.
Example-sha256
OS10# image verify image://PKGS_OS10-Enterprise-10.4.9999EX.3342stretch-
installer-x86_64.bin pki signature tftp://10.16.127.7/users/PKGS_OS10-
Enterprise-10.4.9999EX.3342stretch-installer-x86_64.bin.sha256.base64
public-key tftp://10.16.127.7/users/DellOS10.cert.pem
Image verified successfully.
Example-GPG
key
OS10# image verify image://PKGS_OS10-Enterprise-10.4.9999EX.3342stretch-
installer-x86_64.bin gpg signature tftp://10.16.127.7/users/PKGS_OS10-
Enterprise-10.4.9999EX.3342stretch-installer-x86_64.bin.gpg
Example-PKI
OS10# image verify image://PKGS_OS10-Enterprise-10.4.9999EX.3342stretch-
installer-x86_64.bin pki signature tftp://10.16.127.7/users/PKGS_OS10-
Enterprise-10.4.9999EX.3342stretch-installer-x86_64.bin.sha256.base64
public-key tftp://10.16.127.7/users/DellOS10.cert.pem
Image verified successfully.
1340 Security