Image verification on Cisco iOS

1. * Device Software ImageVerification *
The software installed and running on a network infrastructure device should be verified to ensure that it is valid.
Cisco IOS offers an image verification feature which validates the MD5 digest of an IOS image. If available, digital
signing of software should be leveraged to address authentication and non-repudiation issues.
IOS Software ImageVerification
The Cisco IOS software image verification feature provides a user-friendly mechanism for validating the MD5
digest of an IOS image. This may be configured to occur automatically, upon any ‘copy’ or ‘reload’, or it may be
enabled as a manual option when entering the ‘copy’ or ‘reload’ command. A verification may also be initiated from
the CLI.
Image verification is not currently supported on non-IOS image files.
 To enable automatic image verification, use the Cisco IOS command:
Router(config)# file verify auto
 Manual image verification may be initiated from the CLI using the verify command:
Router# verify location://image
 Manual image verification may be initiated from the CLI during a copy:
Router# copy /verify <source> <dest>
 Manual image verification may also be initiated from the CLI during a reload:
Router# reload /verify
~By, Sagar Gor