Cisco Catalyst 3560-X

1-26
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
OL-25303-03
Chapter 1 Assigning the Switch IP Address and Default Gateway
Boot Loader Upgrade and Image Verification for the FIPS Mode of Operation
The following table describes upgrade and downgrade scenarios using different images and using the
FIPS mode or non-FIPS mode:
Table 1-6 Upgrade and Downgrade Scenarios Relating to FIPS Certified Images
Upgrade/ Downgrade Scenario Action Status or Result
Upgrade from an image that is in
the FIPS mode to a Cisco IOS
Release 15.0(2)SE1 image in the
FIPS mode.
Boot with the Cisco IOS Release
15.0(2)SE1 image.
• The boot loader is upgraded.
• The image signature is verified.
• The following message appears in the boot
sequence: “Image passed digital signature
verification.”
Note If you upload a corrupt or unsigned
image, the following message appears
during boot up: “Image verification
failed.”
Upgrade from a switch that is in
the non-FIPS mode to a Cisco IOS
Release 15.0(2)SE1 image in the
FIPS mode.
• Configure the fips authoriza-
tion-key authorization-key global
configuration command.
• Reload the switch for the FIPS key
to be operational. By default, the
switch automatically boots up;
however, if you have configured it
to boot up manually, you have to
initiate the reboot.
• After the boot loader is upgraded,
boot with the Cisco IOS Release
15.0(2)SE1 image.
• The boot loader is upgraded.
• The image signature is verified.
Note If you upload a corrupt or unsigned
image, the following message appears
during boot up: “Image verification
failed.”
Upgrade to Cisco IOS Release
15.0(2)SE1 in the non-FIPS mode.
Boot with the Cisco IOS Release
15.0(2)SE1 image.
• The boot loader is not updated.
• The image signature is not verified.
• The switch works normally.