Glossary

This page defines terms that IRIS uses with a specific meaning, one entry per term.

staging, to stage

Staging means copying an image to the device's flash and checking its hash, then stopping. The device keeps running its current software until you install the image yourself. See the Overview.

instruction

The signed message the server sends a device saying which images to stage and how. See Security model.

envelope

The encrypted file that carries an instruction. See Security model.

tick

One pass of the agent's check-in loop. See How an image reaches a device.

LKG

The last policy the device accepted (last known good). See Security model.

keyed state

The files the server keeps per device, under that device's id. See Data formats and states.

mutual origin

Permission in both directions between a device and the distribution server. See Security model.

quarantine (image)

An image that failed the Cisco hash check and is held back from devices. See Publish and verify images.

quarantine (device)

A device told to stop sharing with every peer. See Control peer sharing.

principal

Who a request is from: a device, the server's seeder, or a legacy device. See Security model.

The rules that say which devices may share pieces with which. See Security model.

role

A named group of devices that share with each other. See Control peer sharing.

management type

How the agent reaches the network: on its own address, on your management VLAN, or through the router. See Management types.

wave

A group of devices a schedule releases together. See Schedule maintenance windows.

scheduled outcome

The record of what a scheduled run did on one device (the API calls it a receipt). See Schedule maintenance windows.

origin seeder

The server's own copy of the image, the first source in the swarm. See Limits.

park

Stop sharing an unassigned image and clean its staging copy. Retained files depend on the platform and who supplied them. See What happens to an image you unassign.

verifier_missing

The device's agent package carries a bundled signature verifier, so it checks every instruction. verifier_missing means the installed package is outdated or damaged; redeploy the agent package to restore checking. See Troubleshoot.

Bulk Hash

The checksum Cisco publishes for an image. See Publish and verify images.

root key, signing root

One of two protected keys used to approve online instruction-signing keys and sign the key-retirement list. The online key signs device instructions. See Create the signing keys.