Secure Boot
Overview
Secure Boot is a security technology that safeguards against the unauthorized modification of software binaries. The objective of this feature is to implement a secure boot process that includes digital signatures and verification for all bootloader images, up to and including u-boot. The Secure Boot functionality is applicable to AP models that minimally support Wi-Fi 7 and later APs incorporate this protection to ensure that only software, specifically bootloader images, which is properly signed and authorized by RUCKUS, can operate on the AP. This helps prevent unauthorized hacking or tampering of the device.
The Secure Boot feature is not configurable; the factory default setting is Enabled.
Requirements
Wi-Fi 7 and later AP models support Secure Boot.
%20Access%20Points%20and%20Switch%20Management%20Guide,%207.1.0_v3_GUID-27662C2D-2A18-49E9-B6DA-1E1B1F29F636/AP-10271=GUID-EFD58EF5-F2F1-4077-8653-1BDD0EFD1551=1=en-US=Low.png "General AP Information")
Considerations
The RUCKUS AP uses two features for signing and verification of software:
- Image signing: The AP image signing feature signs and verifies the entire AP software image, including the Kernel and Root File System. However, it does not cover the signing and verification of the bootloader images stored in NOR flash.
- Secure Boot: Secure Boot performs the signing and verification of the bootloader images in NOR flash memory.