416 MDS Orbit MCR/ECR Technical Manual MDS 05-6632A01, Rev. F
Signing a GE MDS firmware package is an optional step for users and is not required. Users may wish to
sign a firmware package to ensure that only user-approved firmware package revisions from GE MDS
can be loaded into a unit. An example of signing a firmware package is shown below:
./pkgsigner -v ge_pubcert.pem -k user_key.pem -P "mypass" -p user_pubcert.pem -f
ge_signed_package.mpk -o user_signed_package.mpk
Processing file: 'ge_signed_package.mpk'
Package ID: 20121101
NumImages: 4
NumSignatures: 1
Image #0 : Bootloader version 2012.07-g644d99
Image #1 : Kernel version 3.0.15-mds-gc00
Image #2 : RootFS version 0.0.4
Image #3 : CompFS version 0.0.0
Package version: 0.0.4
Signature #1 validation was successful.
Packed file created in 'user_signed_package.mpk'.
Where:
ge_signed_package.mpk is the firmware package provided by GE MDS that was signed by GE MDS.
Firmware packages will typically be downloaded by users from GE MDS websites.
ge_pubcert.pem is the public certificate provided by GE MDS that is used to verify that the signed
packaged is authentic. The GE MDS public certificate will typically be downloaded by users from the
GE MDS website.
user_key.pem is a private key provided by the user.
mypass is the password used to decrypt user_key.pem, assuming the key is password protected. If the
key is not password protected, then the –P option may be omitted.
user_pubcert.pem is the public certificate corresponding to user_key.pem.
user_signed_package.mpk the file that will be created that contains the GE MDS signature and the
newly appended user signature.
When verifying a user-signed package, both the GE MDS public certificate and the user’s public
certificate must be provided to the CST:
./pkgsigner -l -v ge_pubcert.pem -v user_pubcert.pem -f user_signed_package.mpk
Processing file: 'user_signed_package.mpk'
Package ID: 20121101
NumImages: 4
NumSignatures: 2
Image #0 : Bootloader version 2012.07-g644d99
Image #1 : Kernel version 3.0.15-mds-gc00
Image #2 : RootFS version 0.0.4
Image #3 : CompFS version 0.0.0
Package version: 0.0.4
Signature #2 validation was successful.
Signature #1 validation was successful.