For When You Can't Have The Real Thing
[ start | index | login ]
start > Netscreen > Update Certificate And Firmware From CLI

Update Certificate And Firmware From CLI

Created by dave. Last edited by dave, 3 years and 13 days ago. Viewed 1,152 times. #1
[edit] [rdf]
labels
attachments
(2015-11-27)

Problem

I need to update the firmware and firmware signing certificate. For various reasons I only have the CLI.

Solution

Place the firmware and the .cer certificate on a tftp server.

Then:

SSG140-> save image-key tftp 192.168.1.110 imagekey.cer
Load file  from TFTP 192.168.1.110 (file: imagekey.cer).
!!!!!
tftp received octets = 863
tftp success!
Done

TFTP Succeeded

SSG140-> save software from tftp 192.168.1.110 ssg140.6.3.0r19.0 to flash

Load software from TFTP 192.168.1.110 (file: ssg140.6.3.0r19.0). !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! tftp received octets = 12575448 tftp success!

TFTP Succeeded Save to flash. It may take a few minutes ...platform = 24, cpu = 12, version = 18 update new flash image (02d8f890,12575448) platform = 24, cpu = 12, version = 18 offset = 20, address = 5800000, size = 12575369 date = 2493, sw_version = 31808000, cksum = f8e14337 Image authenticated! Program flash (12575448 bytes) … ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++done Backup image write ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++done Done SSG140->

You can now reset your firewall and enjoy a updated-firmware world.

Note

If you upgrade the certificate from the GUI, it says you have to immediately update the firmware. I don't know what happens if you don't.

no comments | post comment
This is a collection of techical information, much of it learned the hard way. Consider it a lab book or a /info directory. I doubt much of it will be of use to anyone else.

Useful:


snipsnap.org | Copyright 2000-2002 Matthias L. Jugel and Stephan J. Schmidt