Configuration file integrity

The Junos OS configuration integrity feature enhances the current functionality where certain sensitive data is encrypted and protected by the Trusted Platform Module (TPM) using a master encryption password. This enhancement generates a SHA256 hash of the configuration file that is protected by the master encryption password, meaning that if someone tampers with the configuration, the system will not be able to boot up. If the system is compromised, the administrator can recover the system by clearing the TPM ownership in u-boot and then installing the image in the boot loader using TFTP or USB (if USB port is not restricted).