# Firmware package 7.54.0.A1 for SL808xT/BT digital signature revoked by Sierra Wireless? Has it been compromised?

**URL:** <https://forum.sierrawireless.com/t/firmware-package-7-54-0-a1-for-sl808xt-bt-digital-signature-revoked-by-sierra-wireless-has-it-been-compromised/28032>\
**Category:** Legacy AirPrime modules\
**Created:** [October 5, 2022, 3:34pm UTC](https://forum.sierrawireless.com/t/firmware-package-7-54-0-a1-for-sl808xt-bt-digital-signature-revoked-by-sierra-wireless-has-it-been-compromised/28032 "2022-10-05T15:34:59Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![clickndeploy](https://avatars.discourse-cdn.com/v4/letter/c/91b2a8/32.png) [@clickndeploy](https://forum.sierrawireless.com/u/clickndeploy)\
**Post date:** [October 5, 2022, 3:34pm UTC](https://forum.sierrawireless.com/t/firmware-package-7-54-0-a1-for-sl808xt-bt-digital-signature-revoked-by-sierra-wireless-has-it-been-compromised/28032/1 "2022-10-05T15:34:59Z")

</div>

Has anyone used the Firmware package 7.54.0.A1 for SL808xT/BT package?

I noticed that the digital signature for Firmware package 7.54.0.A1 for SL808xT/BT, R7.54.0.A1.201603171313.SL808xA\_22\_1.exe digital signature has been revoked by Sierra Wireless. Is this firmware package infected by malware? I downloaded it 5 years ago. I checked Sierra Wireless website, the file online is exactly the same one as my copy - [https://source.sierrawireless.com/resources/airprime/software/firmware-package-7,-d-,54,-d-,0,-d-,a1-for-sl808xt\_bt/#sthash.Ud0SzXEg.T29uqfb4.dpbs](https://source.sierrawireless.com/resources/airprime/software/firmware-package-7,-d-,54,-d-,0,-d-,a1-for-sl808xt_bt/#sthash.Ud0SzXEg.T29uqfb4.dpbs)

Has anyone used this package? Thanks! ☹

---

<div class="post-metadata">

**Author:** ![jyijyi](https://sea1.discourse-cdn.com/flex025/user_avatar/forum.sierrawireless.com/jyijyi/32/4766_2.png) [@jyijyi](https://forum.sierrawireless.com/u/jyijyi)\
**Post date:** [October 5, 2022, 5:20pm UTC](https://forum.sierrawireless.com/t/firmware-package-7-54-0-a1-for-sl808xt-bt-digital-signature-revoked-by-sierra-wireless-has-it-been-compromised/28032/2 "2022-10-05T17:20:31Z")

</div>

I just download from your link, i can see the digital signature:

 ![image](https://us1.discourse-cdn.com/flex025/uploads/sierrawireless/original/2X/e/efb26bc3b69805d6e75a88328c0247eb7f84bf29.png)

---

<div class="post-metadata">

**Author:** ![clickndeploy](https://avatars.discourse-cdn.com/v4/letter/c/91b2a8/32.png) [@clickndeploy](https://forum.sierrawireless.com/u/clickndeploy)\
**Post date:** [October 6, 2022, 1:57am UTC](https://forum.sierrawireless.com/t/firmware-package-7-54-0-a1-for-sl808xt-bt-digital-signature-revoked-by-sierra-wireless-has-it-been-compromised/28032/3 "2022-10-06T01:57:41Z")

</div>

Thanks. Please select the signature and then click on the button “Details”.

---

<div class="post-metadata">

**Author:** ![jyijyi](https://sea1.discourse-cdn.com/flex025/user_avatar/forum.sierrawireless.com/jyijyi/32/4766_2.png) [@jyijyi](https://forum.sierrawireless.com/u/jyijyi)\
**Post date:** [October 6, 2022, 2:00am UTC](https://forum.sierrawireless.com/t/firmware-package-7-54-0-a1-for-sl808xt-bt-digital-signature-revoked-by-sierra-wireless-has-it-been-compromised/28032/4 "2022-10-06T02:00:34Z")

</div>

it has been expired:

 ![image](https://us1.discourse-cdn.com/flex025/uploads/sierrawireless/original/2X/d/d3e1e6fe5089b75e480b0fe771f4105ac37a9187.png)

But I believe you can still use the exe, right?

---

<div class="post-metadata">

**Author:** ![clickndeploy](https://avatars.discourse-cdn.com/v4/letter/c/91b2a8/32.png) [@clickndeploy](https://forum.sierrawireless.com/u/clickndeploy)\
**Post date:** [October 6, 2022, 2:08am UTC](https://forum.sierrawireless.com/t/firmware-package-7-54-0-a1-for-sl808xt-bt-digital-signature-revoked-by-sierra-wireless-has-it-been-compromised/28032/5 "2022-10-06T02:08:20Z")

</div>

The expired certificate isn’t an issue. The issue is the certificate has been explicitly revoked.

Here’s another firmware package which is older but has valid certificate.

 ![Firmware-cert - Copy](https://us1.discourse-cdn.com/flex025/uploads/sierrawireless/original/2X/7/7dff092562bc7b9f7b5c842c72f91ea0de681e24.jpeg)

---

<div class="post-metadata">

**Author:** ![jyijyi](https://sea1.discourse-cdn.com/flex025/user_avatar/forum.sierrawireless.com/jyijyi/32/4766_2.png) [@jyijyi](https://forum.sierrawireless.com/u/jyijyi)\
**Post date:** [October 6, 2022, 2:12am UTC](https://forum.sierrawireless.com/t/firmware-package-7-54-0-a1-for-sl808xt-bt-digital-signature-revoked-by-sierra-wireless-has-it-been-compromised/28032/6 "2022-10-06T02:12:05Z")

</div>

if you don’t trust this exe, you can download the dwl file and use AT+WDWL to download to the module

---

<div class="post-metadata">

**Author:** ![clickndeploy](https://avatars.discourse-cdn.com/v4/letter/c/91b2a8/32.png) [@clickndeploy](https://forum.sierrawireless.com/u/clickndeploy)\
**Post date:** [October 6, 2022, 3:05am UTC](https://forum.sierrawireless.com/t/firmware-package-7-54-0-a1-for-sl808xt-bt-digital-signature-revoked-by-sierra-wireless-has-it-been-compromised/28032/7 "2022-10-06T03:05:04Z")

</div>

Have you used this package? I just want to confirm if this exe package (the original one since 2016/2017) has been used successfully.

---

<div class="post-metadata">

**Author:** ![jyijyi](https://sea1.discourse-cdn.com/flex025/user_avatar/forum.sierrawireless.com/jyijyi/32/4766_2.png) [@jyijyi](https://forum.sierrawireless.com/u/jyijyi)\
**Post date:** [October 6, 2022, 3:30am UTC](https://forum.sierrawireless.com/t/firmware-package-7-54-0-a1-for-sl808xt-bt-digital-signature-revoked-by-sierra-wireless-has-it-been-compromised/28032/8 "2022-10-06T03:30:42Z")

</div>

What do you mean by (the original one since 2016/2017) ? R7.54.0.A1.201603171313.SL808xA\_22\_1.exe?

I don’t have SL8 module now, have you tried that exe in SOURCE page?

---

<div class="post-metadata">

**Author:** ![clickndeploy](https://avatars.discourse-cdn.com/v4/letter/c/91b2a8/32.png) [@clickndeploy](https://forum.sierrawireless.com/u/clickndeploy)\
**Post date:** [October 6, 2022, 4:08am UTC](https://forum.sierrawireless.com/t/firmware-package-7-54-0-a1-for-sl808xt-bt-digital-signature-revoked-by-sierra-wireless-has-it-been-compromised/28032/9 "2022-10-06T04:08:09Z")

</div>

Actually, the one on the website is the original one. I downloaded mine 5 years ago, the file size is the same as the one on the website.

 ![Original - Copy](https://us1.discourse-cdn.com/flex025/uploads/sierrawireless/original/2X/8/8948f6902c27be874162ac8f83340e1ec2be3419.jpeg)
