Verifying Software Package Integrity

To prevent software packages from being tampered with or damaged during transmission, which may threaten the carrier network security, you need to verify the integrity of the software packages after obtaining them. Software packages can be deployed only after they pass the verification.

Context

Each software package and its signature file are stored in the same directory. Each software package corresponds to a verification file, which is used to verify the integrity of the software package. To download the digital signature file of a software package, click pgp or cms corresponding to the software package on the support website.

You can click pgp to download a signature file in .asc format for manually verifying the integrity of a software package. To use a software package independently, you need to manually verify the integrity of the software package. For details, see Procedure.

This method can be used to verify the integrity of all software packages.
You can click cms to download a signature file in .p7s format for automatically verifying the integrity of a software package. You need to import a software package together with its CMS signature for the NMS or deployment tool to verify the digital signature.