Utility Server firmware unpack error

Last Updated : Sep 24, 2026 |
Prolog information
Metadata
Keywords:

Condition

When attempting to unpack SIP or H.323 (GA) firmware, the Utility Server fails and outputs the following certificate validation error:
Validating certificate 1 /tmp/firmwareMgt._hZNWe/signatures/RootSA256.txt:
C=US, O=Avaya, OU=Avaya Product PKI, OU=Special Issue, OU=ID-s1-ESID-SID-MID, CN=Avaya File Signing Authority 2020 error 7 at 0 depth lookup: certificate signature failure error /tmp/firmwareMgt._hZNWe/signatures/RootSA256.txt: verification failed 00AE6D7D2F7F0000:error:03000098:digital envelope routines:do_sigver_init:invalid digest:crypto/evp/m_sigver.c:340: 00AE6D7D2F7F0000:error:06880006:asn1 encoding routines:ASN1_item_verify_ctx:EVP lib:crypto/asn1/a_verify.c:200: firmwareMgt: Failed to validate package certificate... Exiting!

Cause

The firmware certificate uses the sha1WithRSAEncryption as a signature algorithm. This algorithm is no longer supported with OpenSSL 3.x on RHEL 9.6, causing the system to reject the certificate.

Solution

  1. In the Utility Server interface, navigate to unpack prompt.
  2. Click Forcibly Unpack to override the certificate failure and proceed with the installation.
Note:
An updated firmware package addressing this certificate requirement is not currently available on the support site.