TMA-ARUBA-CX-1.7.1

Firmware Validation

높음레벨 1수동 검토aruba-cx

설명

All AOS-CX switch firmware is signed by HPE at the time the firmware is created. The firmware signature is verified at the time of download and verified at every boot. The public keys used to verify the firmware is stored within the bootloader and firmware. The firmware is digitally signed with RSA-3072 and SHA-256. If the switch firmware validation fails at boot, the switch will fail to boot with one of the following error messages and drop the user into the ServiceOS login screen: Error: Signature verification failed Error: Signature not found Error: Invalid signature

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Run 'show images verify primary' and 'show images verify secondary'. Both must report that the image is valid (signed and compatible) before the switch is booted from it.

조치 방법

조치 방식: 가이드 또는 인프라 패치

Firmware without a valid signature will not boot. A new firmware image with a valid signature should be copied onto the device.

속성

운영 체제: 모두
태그: aruba-cxupdates
참고 자료: CIS HPE Aruba Networking CX Switch Benchmark v1.0.1 - 1.7.1 Firmware Validation