eAN3810A
Deployment Guide
1 eAN3810A Deployment Guide
Issue 01 (2017-04-30)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
32
−
The digital signatures in the software and patch packages are used to verify integrity.
Do not use the USB making and protection tool to apply integrity protection to
these files. Otherwise, deployments or upgrades using a MicroSD card will fail.
−
Integrity protection must be applied to all other files.
Encryption protection
−
Do not
apply encryption protection to any files in the SD card if the target version
of a base station upgrade does not support SD card-based encryption. Otherwise,
deployments or upgrades using an SD card will fail.
−
If the target version of a base station upgrade supports SD card-based encryption,
−
Do not
apply encryption to the version, BootROM, and patch software packages.
Otherwise, deployments or upgrades using an SD card will fail.
−
You
must
apply encryption to the
CFGDATA.XML
file for eAN3810A.
After you use the USB making and protection tool to apply integrity and encryption
protection to files, the
USBConf.xml
file is generated and the file name cannot be
changed. When loading files in the MicroSD card, the Pico checks file integrity and
decrypts the files based on the data in the
USBConf.xml
file.
Procedure
1.
Prepare the directory for files to be protected.
The directory structure is fixed. It cannot be modified, or deployments or upgrades using
a MicroSD card will fail. The following figure shows an example with the CA server
deployed in the secure domain.
Figure 1-12
Directory structure for files to be protected (single MicroSD card)
The USB making and protection tool applies integrity and encryption protection to files but it cannot
decrypt files. Back up the files to be protected before applying integrity and encryption protection.
2.
Choose
Start
>
Programs
>
iManager U2000 MBB Client
>
USB Making and
Protection Tool
to start the tool.
3.
Choose
USB Protection
>
USB Protection Settings
. The
USB Protection Settings
dialog box is displayed. See