image-filepath—Enter the absolute path name of the OS10 image file.
sha256 signature
signature-filepath—Verify the SHA-256 cryptographic hash signature of the image file.
gpg signature
signature-filepath—Verify the GNU privacy guard signature of the image file.
pki signature
signature-filepath public-key
key-file—Verify the PKI-signed digital signature of the image file.
downgrade-config-file
downgrade-config-file-name—(Optional) Enter the name of the saved configuration file from the home directory in the
home://<filename>.xml format. The specified configuration file gets applied while booting the downgrade image. This parameter is available from Release 10.5.5.5, and it is applicable for software downgrade only. You can use this parameter when downgrading to Release 10.5.5.5 or later from two previous major releases. For example, if the running version is 10.5.8.x, this parameter is supported until Release 10.5.6.x.
Default
None
Security and Access
Sysadmin
Command Mode
EXEC
Usage Information
This command is available only when you enable secure boot. This command is similar to the
image install command. The system, before installing the image, verifies the signature of the OS10 image file using hash-based authentication, GNU privacy guard (Gn uPG or GPG)-based signatures, or digital signatures (PKI-signed). For GPG validation, before you validate the OS10 image, use the
image gpg-key command to install the GPG key in the switch keyring.
When running this command with the
downgrade-config-file parameter, the firmware file name must be in the standard release convention (PKGS_OS10-Enterprise-x.x.x.xbuster-installer-x86_64.bin or Network_Firmware_xxxxx.exe). Renamed firmware file names are not supported.