Update Certificate And Firmware From CLI
(2015-11-27)
You can now reset your firewall and enjoy a updated-firmware world.
Problem
I need to update the firmware and firmware signing certificate. For various reasons I only have the CLI.Solution
Place the firmware and the .cer certificate on a tftp server.Then:SSG140-> save image-key tftp 192.168.1.110 imagekey.cer Load file from TFTP 192.168.1.110 (file: imagekey.cer). !!!!! tftp received octets = 863 tftp success! DoneTFTP SucceededSSG140-> save software from tftp 192.168.1.110 ssg140.6.3.0r19.0 to flashLoad software from TFTP 192.168.1.110 (file: ssg140.6.3.0r19.0). !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! tftp received octets = 12575448 tftp success!TFTP Succeeded Save to flash. It may take a few minutes ...platform = 24, cpu = 12, version = 18 update new flash image (02d8f890,12575448) platform = 24, cpu = 12, version = 18 offset = 20, address = 5800000, size = 12575369 date = 2493, sw_version = 31808000, cksum = f8e14337 Image authenticated! Program flash (12575448 bytes) … ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++done Backup image write ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++done Done SSG140->
Note
If you upgrade the certificate from the GUI, it says you have to immediately update the firmware. I don't know what happens if you don't.
no comments |
post comment
Virtual Dave Megaplex:
Home Page- This wiki's start page
- Send Feedback To Dave
Logged in Users: (0)
Recently Changed
Check Internet Service Database Match- Device-Local Certificate Expired
- CLI Policy Lookup
- DH Selection For IPsec VPNs
- Scan For Newly Added Disk
- nmap
- Seconds Since Epoch to Local Time
- Link Monitor
- DH group to OAKLEY_GROUP table
- Fire Eater
- start
- FortiClient Error Codes
- dhparams Generation
- SSL Certificate Bundles
- ufw
- Grow A LVM Partition
- Creating Users
- whoami
- list databases
- 2023
- 2022
- 2019
- 2018
- 2017
- 2011
- 2010
- 2008
- 2001
- 2000
- 1999
Editing: snipsnap-help, Image Macro(Et auditum est, et idcirco ego nunc simulare)
This is a collection of techical information, much of it learned the hard way. Consider it a lab book or a /info directory. I doubt much of it will be of use to anyone else.