Loading Firmware on the Device
The Junos OS SRX300, SRX320, SRX340, SRX345, and SRX345-DUAL-AC images only accept the firmware signed with ECDSA (P-256) with SHA-256. Any firmware signed with RSA and SHA1 is rejected. The device firmware cannot be downgraded to an image signed with RSA and SHA1. Any attempt shall fail as the SRX Series Firewall shall not load the firmware.