Riverbed SteelHead 5080, Руководство по установке и настройке

Страница: 14 / 94

14 | Riverbed Software Licenses, Upgrades, and Image Signing
Software upgrades and image signing
The feature requires a public key in a certificate to verify the digital signature of the software image. The
certificate is automatically installed on the appliance, but you can import an updated version, if needed.
During the verification process, the appliance compares the signature in the image with the Riverbed
public certificate. If they match, the installation continues. If not, the system alerts you to a potential
problem. As long as image signature verification is enabled, you cannot continue with an installation that
cannot verify the image signature.
To enable software image verification or replace a certificate
1. Display the Software Upgrade page.
2. Under Image Signature Verification, select Image Signature Verification.
If you clear the Image Signing Verification check box, you disable this feature and a warning
message appears indicating images will not be verified.
3. Expand the Image Signing Certificate section, and then ensure the appliance has a valid certificate.
You can use the certificate that is installed by default, or you can select the Import tab to replace an
expired or revoked certificate. You can upload a PKCS #12, PEM, or DER format certificate or copy
and paste a PEM certificate.
4. Click Import Image Signing Certificate to add the certificate to this appliance.
You can only use one certificate. The certificate information appears in the Details tab.
5. Click Apply .
6. Click Save to Disk to save your settings permanently.
Managing software upgrades
To find allowed upgrades between software versions and recommended upgrade paths, use the
Software Upgrade tool for your product on the Riverbed Support site. The tool includes all of the
recommended intermediate versions.
Note: To upgrade the software on the AWS SteelHead-c, use the Riverbed Cloud Portal. For details, see the
SteelHead (in the Cloud) User Guide .
The software images can be quite large; uploading the image to the appliance and installing it can take
a few minutes. As the upgrade progresses, status messages appear.
After the installation is complete, the system reminds you to reboot the appliance to switch to the new
version of the software. The appliance can take a few minutes to reboot. This behavior is normal because
the software is configuring the recovery flash device.
Important: Do not press Ctrl+C, unplug, or otherwise shut down the system during this first boot. There is no
indication displayed during the system boot that the recovery flash device is being configured.
After the upgrade is complete, the Dashboard, Software Upgrade, and Help pages of the Management
Console display the new software version.