Verifying the nextgen-upgrade binary

Edit online

Verify the integrity of the nextgen-upgrade binary before you run it to confirm the file is unmodified.

Before you begin

Before you verify the binary, confirm the following prerequisites:

  • Download the nextgen-upgrade package and extract it. Use one of the following sources: After you extract the package, confirm that the following files are present in the same directory:
    • nextgen-upgrade
    • nextgen-upgrade.cosign.sig
    • nextgen-upgrade.pem.cer
    • nextgen-upgrade.pem.chain
    • nextgen-upgrade.pem.pub.key
  • Install one of the following verification tools:

Procedure

  1. Verify the binary by using one of the following methods:
    Table 1. Binary verification commands
    Method Command
    cosign 
    cosign verify-blob \
    --key nextgen-upgrade.pem.pub.key \
    --signature nextgen-upgrade.cosign.sig \
    --insecure-ignore-tlog \
    nextgen-upgrade
    OpenSSL 
    openssl dgst \
    -verify nextgen-upgrade.pem.pub.key \
    -keyform PEM \
    -sha256 \
    -signature nextgen-upgrade.cosign.sig \
    nextgen-upgrade
  2. Confirm that the output is Verified OK.
    Important: Any output other than Verified OK indicates that the file does not pass verification. Do not use the binary. Download it again from IBM Fix Central or the release server and repeat the verification.

Results

The nextgen-upgrade binary passes verification. Proceed with the data extraction step.

What to do next

Extract data from the legacy database. For more information, see Extracting data from a legacy IBM Optim database.