Verifying Update Bundle Integrity

Edit online

Spyre Support Appliance for IBM Z® and IBM® LinuxONE update bundles are digitally signed to verify their authenticity and confirm their origin from IBM.

About this task

To confirm both the integrity and authenticity of the update bundle, you must verify the digital signature.

Procedure

  1. Log in to IBM Fix Central.
  2. Download both the update bundle and its corresponding signature file.
  3. Download the public key from: https://public.dhe.ibm.com/systems/z/spyre_support_appliance/zssa-pub.pub
  4. Run the following command to verify the update bundle using OpenSSL: 
    openssl dgst -sha256 -verify zssa-pub.pub -signature <signature_file> <updatebundle>
  5. If the update bundle is valid and unaltered, you will see: 
    Verified OK

    This confirms that the downloaded SSA update bundle has not been altered and is indeed from IBM.