Downloading The 6.1.1 Image Using The Relative Path; Downloading The 6.1.1 Image Using The Absolute Path; Director Restrictions For Downgrading; Fips Support - HP A7533A - Brocade 4Gb SAN Switch Base Administrator's Manual

firmware\
v6.0.1\
config\
support\
firmwarekey\
Available space on usbstorage 79%

Downloading the 6.1.1 image using the relative path

To download the 6.1.1 image using the relative path:
1. Log in to the switch as admin.
2. Issue the firmwareDownload command with the -U operand:
admin>firmwaredownload –U v6.1.1

Downloading the 6.1.1 image using the absolute path

To download the 6.1.1 image using the absolute path:
1. Log in to the switch as admin.
2. Issue the firmwareDownload command with the -U operand:
admin>firmwaredownload –U /usb/usbstorage/brocade/firmware/v6.1.1

Director restrictions for downgrading

Note the following restrictions:
• 4/256 SAN Director with one or more FR4-18i blades: If you are running 5.1.0 firmware, you cannot
downgrade to earlier versions without removing the blades.
• 4/256 SAN Director with one or more FC4-48 or FC4-16IP blades: If you are running Fabric OS 5.2.0,
you cannot downgrade to earlier versions without removing the blades.
• Do not remove blades until the EX_Ports are removed first. The firmwareDownload command will
indicate when the blades are safe to remove.
• 4/256 SAN Director with one or more FC10-6 blades: If you are running Fabric OS 6.0.0b or later, you
cannot downgrade to earlier versions without removing the blades.
• 4/256 SAN Director with one or more FC8-16 blades: If you are running Fabric OS 6.0.0b or later, you
cannot downgrade to earlier versions without removing the blade.
• DC Director with FC8-16/32/48 blades: If you are running Fabric 6.0.0b or later, you cannot
downgrade to earlier versions of Fabric OS as they are not supported on this Director.

FIPS Support

Federal information processing standards (FIPS) specify the security standards needed to satisfy a
cryptographic module utilized within a security system for protecting sensitive information in the computer
and telecommunication systems. For more information about FIPS, see
features" on page 107.
The 6.1.1 firmware is digitally signed using the OpenSSL utility to provide FIPS support. To use the digitally
signed software, you need to configure the switch to enable Signed Firmwaredownload. If it is not
enabled then the firmware download process ignores the firmware signature and works as before.
If signed firmwaredownload is enabled, and if the validation succeeds, the firmware download process
proceeds normally. If the firmware is not signed or if the signature validation fails, firmwareDownload will
fails.
To enable or disable FIPS, see

Public and private key management

For signed firmware, we use RSA with 1024-bit length key pair. The Fabric OS requires a private key to
sign the firmware files. During the firmware download process, the public key must validate the signatures
of the firmware files. So the public key needs to be stored on the switch beforehand.
186 Installing and maintaining firmware
381MB 2007 Sep 28 15:33
381MB 2007 Oct 19 10:39
0B 2007 Sep 28 15:33
0B 2007 Sep 28 15:33
0B 2007 Sep 28 15:33
"Configuring advanced security
"Configuring advanced security
features" on page 107.