Validating the installer ISO file

Last Updated : Sep 24, 2026 |
Prolog information
Metadata
Keywords:
Use this procedure to validate the Avaya Aura® application installer ISO, which is signed using Avaya File Signing Authority (AFSA). For a software-only installation, you must validate the ISO manually.
  1. Run the following command to mount the installer ISO:
    ADDITIONAL INFORMATION: mkdir /mnt/iso
    mount -o loop,ro CM*.iso /mnt/iso
  2. Run the following command to validate the certificate file by using the root CA:
    ADDITIONAL INFORMATION: openssl verify -CAfile AvayaRootCert.pem /mnt/iso/CM-010.3*.cert
    This command should return OK.
    ADDITIONAL INFORMATION:
    Note:
    To create the file AvayaRootCert.pem, use the file present in the Appendix E of this document.
  3. Run the following command to extract the public key:
    ADDITIONAL INFORMATION: openssl x509 -in /mnt/iso/CM-010.3*.cert -pubkey -noout > /tmp/key
  4. Run the following command to validate manifest files:
    ADDITIONAL INFORMATION: cd /mnt/iso
    sha256sum -c CM-010.3*.mf
    After you run the command, an output of OK indicates that all the files are correct.
  5. Run the following command to verify the signature of the manifest file:
    ADDITIONAL INFORMATION: openssl dgst -sha256 -verify /tmp/key -signature CM-010*.sig CM-010*.mf
    This command should return Verified OK.