172 MDS Orbit MCR/ECR Technical Manual MDS 05-6632A01, Rev. F
The unit can have two firmware packages programmed into the device. The package that the device
booted into is referred to as the Active Firmware. The other image is referred to as the Inactive Firmware.
To reprogram the device, the Active Firmware transfers the new firmware package from the network and
writes the package into the Inactive Firmware location in memory. To use the new firmware package, the
user must reboot the device to the Inactive Firmware. Doing so will make the Inactive Firmware the
Active Firmware and vice-versa.
Firmware packages released by the factory are digitally signed using a private key. The unit will not
accept firmware packages that are unsigned nor will it accept firmware packages that fail to verify while
using the public certificates loaded into the device. Therefore it is necessary to have the GE MDS public
certificate loaded into the device to reprogram the firmware.
Users may add their own signatures to the firmware package using the GE MDS code signing tool.
NOTE Any additional signatures added to a firmware package will require the corresponding public
certificates to be loaded into the unit for firmware reprogramming to complete successfully.
Similarly, any additional firmware-validation public certificates loaded into the unit require a
firmware package to be signed with the corresponding private keys.
From the WebUI, navigate to System / Firmware. The Versions section shows the firmware currently
loaded in the two regions and which region is active.
Figure 3-85. Firmware Versions Screen
Monitoring
Ensure the CLI is in operational mode. Follow the example below to view the state and statistics of the
currently installed firmware packages.
> show system firmware versions
system system firmware versions 1
version 4.0.2
active true
signatures 1
certificate-sha256
3d9d795dcf374084de536986a29238ea7dc87104259619bc7aa4cfa3e2c64990
system firmware versions 2
version 4.0.2
active false
signatures 1
certificate-sha256
3d9d795dcf374084de536986a29238ea7dc87104259619bc7aa4cfa3e2c64990