Users Guide

OS10 system binary validation fails for both installed OS10 images
If the system binary validation fails for one of the installed images, the system allows you to log into OS10 CLI EXEC mode. You
cannot access CONFIGURATION mode. The following log message appears when you use the show logging log-file
command:
Dell EMC (OS10) %SECURE_BOOT: OS10 sytem file integrity failed. OS10 image needs to be
reinstalled.
To recover from this validation failure:
1. Boot into ONIE.
2. Install a valid OS10 image using the onie-nos-install command. For more information, see Installation using ONIE.
Boot security commands
boot protect disable username
Allows you to disable bootloader protection.
Syntax
boot protect disable username username
Parameters
● username - Enter the username to disable bootloader protection.
Default Disabled
Command Mode EXEC
Usage
Information
You can disable bootloader protection for each individual user.
Example
OS10# boot protect disable username root
Supported
Releases
10.4.3.0 or later
boot protect enable username password
Allows you to enable bootloader protection.
Syntax
boot protect enable username username password password
Parameters
● username — Enter the username to provide access to bootloader protection.
● password — Enter a password for the specified username.
Default Disabled
Command Mode EXEC
Usage
Information
You can enable bootloader protection by executing this command. You can configure a maximum of three
username / password pairs for bootloader protection.
Example
OS10# boot protect enable username root password calvin
Supported
Releases
10.4.3.0 or later
show boot protect
Displays the current list of configured users that have access to bootloader protection.
Syntax
show boot protect
Parameters None
1356 Security