Code signature verification
Signature verification is available to ensures the authenticity of new IBM tape library firmware releases.
Here are the three steps for signature verification:
- Download from Fix Central: public key, firmware code, and signature file
- Open Terminal session.
- From the directory where you downloaded the Fix Central run the following command.
openssl dgst -verify <pub.key> -keyform PEM -sha256 -signature <file.sig> -binary <libraryFirmware.afwz>
The command will result with a success message.
Verified OKTake the following steps, if you receive any other response:
- Delete the files that you downloaded.
- Download a new set of files from Fix Central.
- If the command fails repeatedly, try doing the verification on a different device.