White Papers

verified boot
2. Verify the hash checksum of the current OS image file on the local file system.
EXEC Privilege
verified boot hash system-image {A: | B:} hash-value
You can get the hash value for your hashing algorithm from the Dell EMC iSupport page. You can use the MD5, SHA1, or
SHA256 hash and the Dell EMC Networking OS automatically detects the type of hash.
NOTE: The verified boot hash command is only applicable for OS images in the local file system.
3. Save the configuration.
EXEC Privilege
copy running-configuration startup-configuration
After enabling and configuring OS image hash verification, the device verifies the hash checksum of the OS boot image during
every reload.
DellEMC# verified boot hash system-image A: 619A8C1B7A2BC9692A221E2151B9DA9E
Image Verification for Subsequent OS Upgrades
After enabling OS image hash verification, for subsequent Dell EMC Networking OS upgrades, you must enter the hash
checksum of the new OS image file. To enter the hash checksum during upgrade, follow these steps:
● Use the following command to upgrade the Dell EMC Networking OS and enter the hash value when prompted.
EXEC Privilege
upgrade system
DellEMC# upgrade system tftp://10.16.127.35/FTOS-SE-9.11.0.1 A:
Hash Value: e42e2548783c2d5db239ea2fa9de4232
!!!!!!!!!!!!!!...
Startup Configuration Verification
Dell EMC Networking OS comes with startup configuration verification feature. When enabled, it checks the integrity of the
startup configuration that the system uses while the system reboots and loads only if it is intact.
Important Points to Remember
● The startup configuration verification feature is disabled by default on the Dell EMC Networking OS.
● The feature is supported for startup configuration files stored in the local system only.
● The feature is not supported when the fastboot or the warmboot features are enabled on the system.
●
If the startup configuration verification fails after a reload, the system does not load your startup configuration.
● After enabling the startup configuration verification feature, use the verified boot hash command to verify and store
the hash value. If you don’t store the hash value, you cannot reboot the device until you verify the image hash.
● If OS image verification fails, the system does not load your startup configuration and displays an error message until you
remove the verified boot command from the configuration.
Dell EMC Networking OS Behavior after System Power-Cycle
If the system reboots due reasons such as power-cycle, the current startup configuration may be different than the one
you verified the hash using the verified boot hash command. When the system comes up, the system may use the
last-verified startup configuration.
Dell EMC Networking recommends backing up the startup configuration to a safe location after you use the verified boot
hash command. When the startup configuration verification fails, you can restore it from the backup.
Management
83