Users Guide

Example
OS10# secure-boot enable
Supported
Releases
10.5.1.0 or later
image verify
Verifies the OS10 image file using sha256, PKI, or GPG signatures.
Syntax
image verify image-filepath {sha256 signature signature-filepath | gpg
signature signature-filepath | pki signature signature-filepath public-key
key-file}
Parameters
● image-filepath—Enter the absolute path name of the OS10 image file.
● sha256 signature signature-filepath—Verify the SHA-256 cryptographic hash signature
of the image file.
● gpg signature signature-filepath—Verify the GNU privacy guard signature of the image
file.
● pki signature signature-filepath public-key key-file—Verify the PKI-signed
digital signature of the image file.
Default None
Security and
Access
Sysadmin
Command Mode EXEC
Usage
Information
This command verifies the signature of the OS10 image file using hash-based authentication, GNU privacy
guard (Gn uPG or GPG)-based signatures, or digital signatures (PKI-signed). For GPG validation, before
you validate the OS10 image, use the image gpg-key command to install the GPG key in the switch
keyring.
Example-sha256
OS10# image verify image://PKGS_OS10-Enterprise-10.4.9999EX.3342stretch-
installer-x86_64.bin pki signature tftp://10.16.127.7/users/PKGS_OS10-
Enterprise-10.4.9999EX.3342stretch-installer-x86_64.bin.sha256.base64
public-key tftp://10.16.127.7/users/DellOS10.cert.pem
Image verified successfully.
Example-GPG
key
OS10# image verify image://PKGS_OS10-Enterprise-10.4.9999EX.3342stretch-
installer-x86_64.bin gpg signature tftp://10.16.127.7/users/PKGS_OS10-
Enterprise-10.4.9999EX.3342stretch-installer-x86_64.bin.gpg
Example-PKI
OS10# image verify image://PKGS_OS10-Enterprise-10.4.9999EX.3342stretch-
installer-x86_64.bin pki signature tftp://10.16.127.7/users/PKGS_OS10-
Enterprise-10.4.9999EX.3342stretch-installer-x86_64.bin.sha256.base64
public-key tftp://10.16.127.7/users/DellOS10.cert.pem
Image verified successfully.
Supported
Releases
10.5.1.0 or later
image secure-install
Validates and installs the specified image.
Syntax
image secure-install image-filepath {sha256 signature signature-filepath |
gpg signature signature-filepath | pki signature signature-filepath public-
key key-file}
Parameters
● image-filepath—Enter the absolute path name of the OS10 image file.
Security 1331