Cisco ISR 4000 series Configuration Manual page 12

Cisco ISR 4000 Family Routers Administrator Guidance
 Download the Common Criteria evaluated software image file from Cisco.com onto a
trusted computer system.
 Software
http://www.cisco.com/cisco/software/navigator.html.
 The TOE ships with the correct software images installed, however this may not be the
evaluated version.
Step 8 Once the file is downloaded, copy (via tftp) the downloaded and verified software image
from the trusted system as described in [3].
Once the file has been copied, it is recommended that you read and familiarize yourself with the
Part 2: Configuration Using Setup and Autoinstall -> Overview – Basic Configuration of a Cisco
Networking Device before proceeding with the install [3]. You may also want to familiarize
yourself with [8] basic commands, [14] release notes and [15] fundamental Cisco 4000 Series ISR
and IOS concepts before proceeding with the installation and configuration of the TOE.
Step 9 To verify the digital signature prior to installation, the show software authenticity file
command allows you to display software authentication related information that includes image
credential information, key type used for verification, signing information, and other attributes in
the signature envelope, for a specific image file. The command handler will extract the signature
envelope and its fields from the image file and dump the required information [1] Loading and
Maintaining System
The show software authenticity file command allows you to display software authentication related
information that includes image credential information, key type used for verification, signing
information, and other attributes in the signature envelope, for a specific image file. The command
handler will extract the signature envelope and its fields from the image file and dump the required
information. To display the software public keys that are in the storage with the key types, use the
show software authenticity keys command in privileged EXEC mode.
TOE-common-criteria#
bootflash1:filename
usbflash1:filename}
To display information related to software authentication for the current ROM monitor
(ROMMON), monitor library (monlib), and Cisco IOS image used for booting, use the show
software authenticity running command in privileged EXEC mode.
Step 10 To install and configure the ISR 4000 Family Router follow the instructions as described
in [3] Overview – Basic Configuration of a Cisco Networking Device -> Cisco IOS EX Setup
Mode. Depending on your organization and current network environment, at, Where to Go Next
section, select either 'Using AutoInstall to Remotely Configure Cisco Networking Device' or
Using Setup Mode to Configure a Cisco Networking Device'.
Start your ISR 4000 Family Router as described in [15] and executing associated commands in [8]
and [13]. Confirm that the TOE loads the image correctly, completes internal self-checks and
displays the cryptographic export warning on the console.
images are available
Images ->
show software
| bootflash:filename
from Cisco.com
Digitally Signed
authenticity file
| nvram:filename
at the following:
Cisco Software.
{bootflash0:filename
| usbflash0:filename
Page 12 of 66
|
|