Crypto Verify - Allied Telesis IE340 Series Command Reference Manual

F C M
ILE AND ONFIGURATION ANAGEMENT

CRYPTO VERIFY

crypto verify
Overview Use this command to compare the SHA256 checksum of a file with its correct
checksum. This confirms that the file has not been corrupted or interfered with
during download. You can verify any kind of file, but you cannot specify a file path,
so the file must be stored in the top level of the device's flash memory.
CAUTION
we recommend immediately performing a security audit of your network.
Once the device has verified the file, you can use the copy running-config
startup-config command to save the file/hash pair in the running configuration.
If you do this, the device will verify the file every time it boots up and will take
action if the verification fails.
The action taken when verification fails on boot-up depends on the type of file and
whether the device is in Secure Mode:
•
•
•
•
You can use the
Use the no variant of this command to remove a verified filename/hash
combination from the running configuration.
crypto verify <filename> <hash-value>
Syntax
crypto verify gui <hash-value>
no crypto verify <filename>
C613-50631-01 Rev A
C
OMMANDS
: If a file fails to verify and you believe the file may have been interfered with,
If the device is in Secure Mode and the boot-up firmware file fails verification,
the device will not boot. Contact Allied Telesis support if this happens.
If the device is not in Secure Mode and the boot-up firmware file fails
verification, the device will display the following warning message after
booting: "% Verification Failed". If this occurs because the saved hash is
incorrect, use this command to replace the hash. If this occurs because the
firmware file is corrupted or may have been interfered with, ensure that your
device is secure, then replace the failed file with a known good file and
reboot.
If you use the gui parameter and the GUI fails verification, the device will
boot up but the GUI will be disabled (the service http command will be
disabled).
If any other file fails verification, the device will display the following warning
message after booting: "% Verification Failed"
show hash
Parameter Description
<filename>
The AlliedWare Plus file that you want to verify
gui
Verify the current Device GUI file
<hash-value>
The known correct checksum of the file. For firmware and GUI
files, the correct checksum is listed in thesha256sum file that is
available from the Allied Telesis Download Center.
Command Reference for IE340 Series
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
command to see the current hash of a file.
156