For When You Can't Have The Real Thing
[ start | index | login ]
start > Netscreen > Update Certificate And Firmware From CLI

Update Certificate And Firmware From CLI

Created by dave. Last edited by dave, 3 years and 13 days ago. Viewed 1,152 times. #1
[edit] [rdf]


I need to update the firmware and firmware signing certificate. For various reasons I only have the CLI.


Place the firmware and the .cer certificate on a tftp server.


SSG140-> save image-key tftp imagekey.cer
Load file  from TFTP (file: imagekey.cer).
tftp received octets = 863
tftp success!

TFTP Succeeded

SSG140-> save software from tftp ssg140.6.3.0r19.0 to flash

Load software from TFTP (file: ssg140.6.3.0r19.0). !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! tftp received octets = 12575448 tftp success!

TFTP Succeeded Save to flash. It may take a few minutes ...platform = 24, cpu = 12, version = 18 update new flash image (02d8f890,12575448) platform = 24, cpu = 12, version = 18 offset = 20, address = 5800000, size = 12575369 date = 2493, sw_version = 31808000, cksum = f8e14337 Image authenticated! Program flash (12575448 bytes) … ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++done Backup image write ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++done Done SSG140->

You can now reset your firewall and enjoy a updated-firmware world.


If you upgrade the certificate from the GUI, it says you have to immediately update the firmware. I don't know what happens if you don't.

no comments | post comment
This is a collection of techical information, much of it learned the hard way. Consider it a lab book or a /info directory. I doubt much of it will be of use to anyone else.

Useful: | Copyright 2000-2002 Matthias L. Jugel and Stephan J. Schmidt