Code signature verification

Signature verification is available to ensures the authenticity of new IBM tape library firmware releases.

Here are the three steps for signature verification:
  1. Download from Fix Central: public key, firmware code, and signature file
  2. Open Terminal session.
  3. From the directory where you downloaded the Fix Central run the following command.
    openssl dgst -verify <pub.key> -keyform PEM -sha256 -signature <file.sig> -binary <libraryFirmware.afwz>
The command will result with a success message.
Verified OK
Take the following steps, if you receive any other response:
  • Delete the files that you downloaded.
  • Download a new set of files from Fix Central.
  • If the command fails repeatedly, try doing the verification on a different device.