Dell SmartFabric OS10 User Guide Release 10.5.3

Protect the startup configuration file

Protecting the startup configuration file saves a copy of the current startup configuration file internally. During switch boot up, the protected version of the startup configuration is loaded.

If you make OS10 configuration changes and save them to the startup configuration, protect the current startup configuration file by using the secureboot protect startup-config command. This command is supported in the sysadmin, secadmin, and netadmin roles.

Configuration has changed and secure boot is enabled. The protection of the configuration needs to be updated prior to reboot.

If you reboot the system using the reload command and either the startup configuration is not protected or there are unsaved changes in the protected startup configuration, the warning message is displayed. The system reboot is not performed until you protect the current startup configuration file using the secureboot protect startup-config command.

If you reboot the system using a non-CLI method, such as power cycling, the last protected startup configuration is loaded. Any unsaved changes to the current startup configuration are lost. If the startup configuration is not protected, the default startup configuration settings are loaded.

Use the secure-boot verify startup configuration command to check if the current configuration is protected.

secure-boot verify startup-config