HP Security Modules Software Upgrade Guide-6PW103

Files

To upgrade the software on Security modules, you need to upgrade and maintain the following three

categories of files:

• BootWare program file

• Application files

• Configuration files

BootWare program file

The BootWare program file on a Security module is used for booting application files and is saved on the

Flash of the Security module.

The entire BootWare program file contains a basic segment and an extended segment.

• The basic segment is used for the basic initialization of the Security module. After the basic

initialization, the network interfaces and the CF card are still unavailable.

• After the Security module runs the extended segment, the network interfaces and the CF card are

available. The extended segment provides diversified human-computer interaction (HCI) functions

to upgrade the applications and the boot system.

• After the basic segment is booted, the extended segment can be upgraded on the menu of the basic

segment.

Application files

Currently, the application files on a Security module usually refer to the boot files. A boot file is an

application file used to boot the Security module. By default, a Security module defines three application

files for boot.

• Main application file (main file for short): The default name is main.bin and the file type is M. It is

the default application file used for the Security module boot.

• Backup application file (backup file for short): The default file name is backup.bin and the file type

is B. When booting with the main application file fails, the Security module uses the backup

application file to boot.

• Secure application file (secure file for short): The file name is secure.bin and the file type is S. When

booting with the main and backup application files fails, the Security module uses the secure

application file to boot. When booting with the secure application file fails, boot failure will be

prompted.

These three types of files are stored on the CF card for all Security modules except the SSL VPN modules.

For an SSL VPN module, the files are stored on the flash memory by default.

If you have loaded the three application files into the CF card, the Security module will boot using these

three files in sequence. To change the sequence or a file type, see “Maintaining Files”.

Note that:

• The application files for booting the Security module can be type M, B, and S, but not type N/A

(type other than M, B, or S).

• You can modify the name of application files using the rename command after the Security module

boots. If you changed the name of the secure application file, there is no secure application file on

the CF card and you need to download a secure application file to the CF card again.

• You can modify the type of application files of type M, B or N/A except type S on the BootWare

menu, or at the CLI after the Security module boots.