Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Installing Junos Software Packages

SRX Series devices can provide the security defined by Federal Information Processing Standards (FIPS) 140-3 Level 2 if these devices are operated in the Junos OS in FIPS mode.

Note:

Junos OS is delivered in signed packages that contain digital signatures to ensure the Juniper Networks software is running. When installing the software packages, Junos OS validates the signatures and the public key certificates used to digitally sign the software packages. If the signature or certificate is found to be invalid (for example, when the certificate validity period has expired or cannot be verified against the root CA stored in the Junos OS internal store), the installation process fails. Some functionalities might be impacted during the reboot following the software upgrade and not during the upgrade.

To install these software packages, perform the following tasks:

  1. Download the Junos OS package and the Junos FIPS mode package from https://support.juniper.net/support/downloads/. See Downloading Software.
  2. Install Junos OS on your device using the following CLI command:

    For SRX1500, SRX4100, SRX4200, and SRX4600, use request system software add /<image-path>/<junos package> no-copy no-validate reboot.

    For SRX1600, SRX2300, and SRX4300 devices, use vmhost software add /<image-path>/<junos package> no-validate reboot.