Software Installation and Upgrade
-
Separate stage and activate options for software installations (PTX10001-36MR, PTX10003, PTX10004, PTX10008, and PTX10016)—You have the option to install software in separate staging and activation phases, which provides finer control over software management. The
request system software add stagecommand enables you to install a new software image without setting it as the next boot version, supporting multiple installations. Therequest system software stagecommand enables you to validate and save the active configuration for an installed software image. Additionally, you can activate an installed software image at any time by using therequest system software activatecommand, which sets the image as the next boot version. By staging and validating software images in advance, you can shorten the maintenance window for software upgrades, which is reduced to activating the image and rebooting the system.[See Stage and Activate Junos OS Evolved Software, request system software add, request system software stage, and request system software activate.]
-
Secure boot and common BIOS support (JNP10008-SF5 switch interface board (PTX10008))—The Secure boot implementation is based on the UEFI 2.4 standard. The BIOS has been hardened and serves as a core root of trust. The BIOS updates, the bootloader, and the kernel are cryptographically protected. Secure boot is enabled by default on supported platforms.
[See Junos OS Evolved Overview and request system firmware upgrade (Junos OS Evolved).]
-
Include certificates in bundled ISOs (PTX10002-36QDD and PTX10008)—You can include certificates in bundled ISOs so that the certificates required for custom packages inside the ISO are installed automatically. To install a bundled ISO that includes certificates, use the
request system software add restart allow-bundled-keys bundled-iso-pathcommand:[See Creating a Bundled ISO.]
-
Load set-formatted and XML-based configuration files for ZTP (ACX7020-AC, ACX7020-AC-C, ACX7020-DC, ACX7020-DC-C, ACX7024, ACX7024X, ACX7100-32C, ACX7100-48L, ACX7332, ACX7348, ACX7509, PTX10001-36MR, PTX10002-36QDD, PTX10003, PTX10004, PTX10008, PTX10016, PTX12008, QFX5130-32CD, QFX5130-48C, QFX5130-48CM, QFX5130E-32CD, QFX5140-24CD8O, , QFX5220, QFX5230-64CD, QFX5240-64OD, QFX5240-64QD, QFX5241-32OD, QFX5241-32QD, QFX5241-64OD, QFX5241-64QD, QFX5241E-64OD, QFX5250-64OE, QFX5700, and QFX5700E)—You can load set-formatted or XML-based configuration files when your device provisions for zero-touch provisioning (ZTP). Reuse existing set-style or XML-based configuration files for automated onboarding to avoid converting them to hierarchical syntax. Provide the configuration file in set format or in XML and specify the configuration file name under the DHCP vendor configuration options.
[See Zero Touch Provisioning.]