Upcoming community maintenance Oct. 27th through Oct. 29th
For more info click here

Security of updates

Highlighted
New Member

Security of updates

Is there anyway to reload the software on the APs

is it possible to do a mitm attack on the software and therefore rogue software gets loaded onto the AP?. Like if someone is on your network and doing mitm on your router injecting code into the software on the AP?. Are updates signed with certificate pinning etc? 

0 Kudos
3 Replies
Highlighted
Occasional Contributor I

Re: Security of updates

TRUSTED PLATFORM MODULE (TPM
All Aruba Instant On access points have an installed
TPM for secure storage of credentials, keys, and boot
codes. source

0 Kudos
Highlighted
New Member

Re: Security of updates

How does a TPM protect from rogue software getting loaded on an AP or if the AP gets exploited?  Can we reload the firmware at all?

0 Kudos
Highlighted
Occasional Contributor I

Re: Security of updates

Yes, it does protect. If somebody tries to inject rogue firmware it just fails to load en returns to previous safe version.

No you can't manually reload firmware, it's all done trough AWS cloud. Read more at https://www.arubainstanton.com/techdocs/en/content/maintenance/mobile/firm-upgrd.htm?Highlight=updat...

0 Kudos