Firmware update signing
Every RouDem firmware image released by MiWire is digitally signed. Before installing an image, a unit verifies the signature and checks that the image is intended for its hardware and is complete. An image that fails any of these checks is not installed.
Each unit trusts two MiWire signing keys: the key in use and a spare that exists so updates continue if the first key ever has to be withdrawn.
Key fingerprints
Section titled “Key fingerprints”| Key | Fingerprint |
|---|---|
| MiWire firmware signing key 1 (in use) | 8fab6a0d9b2b7030 |
| MiWire firmware signing key 2 (spare) | e4101b9c845a2309 |
Fingerprints are the usign key identifiers; a unit lists the same values as file names under /etc/opkg/keys.
If you have received a firmware file from MiWire support and want it verified before use, contact support with the file’s name and version.