******************************************************************************
#
#      File:   README.signature
#
#      Description: README regarding the image authenticity verification
#                   process for Cisco images
#
#
# Copyright (c) 2014, 2015, 2016, 2017, 2018, 2019 by Cisco Systems, Inc.
# All rights reserved.
#
#******************************************************************************

The enclosed file signature.txt contains a SHA-512 signature that can be used
to verify the authenticity of the following Cisco release archive:

CiscoAVS_4.20-5.2.1.SV3.4.20.zip

NOTE:
Authenticity verification of an image is an optional operation. The image can
still be installed without validating its authenticity.

If the user wants to validate authenticity of the image before installing, the
steps below should be followed.

Prerequisite: you need to be on a Linux machine with the following
utilities installed:
- openssl;
- base64.

1. Copy the following to a directory on the Linux machine:
- The above-mentioned release archive "CiscoAVS_4.20-5.2.1.SV3.4.20.zip";
- The file "signature.txt" from this archive;
- The script "cisco_n1k_image_validation_v_1_1" from this archive.

2. Ensure that the script is executable:

chmod 755 cisco_n1k_image_validation_v_1_1

3. Run the script:

./cisco_n1k_image_validation_v_1_1 -s signature.txt CiscoAVS_4.20-5.2.1.SV3.4.20.zip 

4. Check the output. On successful validation, the following message should be
expected:

"Authenticity of Cisco-signed image CiscoAVS_4.20-5.2.1.SV3.4.20.zip has been successfully verified!"
