Specifications

78 MDS Orbit MCR-4G Technical Manual MDS 05-6628A01, Rev. A
Firmware Management
Understanding
The unit can have two firmware packages programmed into the device. The package that the device
booted into is referred to as the Active Firmware. The other image is referred to as the Inactive
Firmware.
To reprogram the device, the Active Firmware streams the new firmware package from the network
and writes the package into the Inactive Firmware location in memory. To use the new firmware
package, the user must reboot the device to the Inactive Firmware. Doing so will make the Inactive
Firmware the Active Firmware and vice-versa.
Firmware packages released by the factory are digitally signed using a private key. The unit will not
accept firmware packages that are unsigned nor will it accept firmware packages that fail to verify
while using the public certificates loaded into the device. Therefore it is necessary to have the GE MDS
public certificate loaded into the device to reprogram the firmware.
Users may add their own signatures to the firmware package using the GE MDS code signing tool.
NOTE: Any additional signatures added to a firmware package will require the corresponding public
certificates to be loaded into the unit for firmware reprogramming to complete successfully. Simi-
larly, any additional firmware-validation public certificates loaded into the unit require a firm-
ware package to be signed with the corresponding private keys.
The request reprogram-inactive-image initiates the reprogramming sequence on the unit. The request
will return immediately and the reprogramming sequence will continue in the background on the
device. The reprogramming sequence can take several minutes. The status of the reprogramming
sequence can be polled to know when reprogramming has completed.
admin@(none) 06:24:44> request system firmware reprogram-inactive-image preconfig-
ured-file-server { configuration_name GE-FileServer-1 } filename files/firmware.mpk
[ok][2012-06-21 06:25:26]
admin@(none) 06:25:26>
Monitoring
Ensure the CLI is in operational mode. Follow the example below to view the state and statistics of the
currently installed firmware packages:
admin@(none) 03:55:43> show system firmware versions
system firmware versions 1
version 1.0.1
active true
CERTIFICATE
SIGNING
INDEX CERTIFICATE SHA256
-------------------------------------------------------------------------------
1 3d9d795dcf374084de536986a29238ea7dc87104259619bc7aa4cfa3e2c64990