The set device usb-deployment hmac-key command configures an HMAC key for HMAC verification during USB-based deployment.
The undo set device usb-deployment hmac-key command deletes the HMAC key used for HMAC verification during USB-based deployment.
By default, no HMAC key is configured for HMAC verification.
| Parameter | Description | Value |
|---|---|---|
hmac-key |
Specifies an HMAC key for HMAC verification during USB-based deployment. |
The value is a string of 32 to 64 or 68 to 108 characters.
|
If upgrade files include a configuration file, you can enable HMAC verification to ensure validity of the configuration file to be loaded. After the set device usb-deployment hmac command is run to enable HMAC verification for the configuration file during USB-based deployment, run the set device usb-deployment hmac-key command to configure an HMAC key for HMAC verification so that the device calculates the HMAC value of the configuration file and then compares the value with the HMAC field value in the index file. If the two values are the same, the configuration file is valid and loaded to the device for USB-based deployment. If the two values are different, the configuration file is invalid and cannot be loaded for USB-based deployment.
A user at a level lower than the management level cannot check the HMAC key configured using this command. If this user checks the configuration file, the HMAC key is displayed as ******.