Skip to main content

How can we help you?

Search

help Knowledge Base
forum Community
checklist Release Notes
event Events

Verify Roaming Client installers with PGP/GPG

Alisa Bailey
  • Updated

    In this article

Verify the integrity of a downloaded Windows or macOS Roaming Client installer with a PGP/GPG program. PGP/GPG programs add a layer of security to electronic communications. These steps are optional and add extra security to the installation.

Verify the Windows installer

Step one: Install Gpg4win

Download Gpg4win and install it.

Optionally, add the installation directory to the path. This makes it possible to type only gpg from the command line rather than the full path, C:\Program Files\Gpg4win\bin. To add it:

  1. From the Windows device, navigate to the Control Panel and open System.
  2. Select Advanced.
  3. Select Environment Variables.

  4. Edit Path, and add this value to the end of the path:

    ; C:\Program Files\Gpg4win\bin
  5. Select OK until the System dialog closes.

Step two: Import the DNSFilter public key

  1. Download the public key.
  2. Save the key, such as to C:\Users\Joe\Desktop\dnsfilter-public-key.asc

  3. Import the public key:

    gpg --import C:\Users\Joe\Desktop\dnsfilter-public-key.asc

Step three: Download the installer and checksum file, then verify

  1. From the DNSFilter dashboard, navigate to Deployments > Roaming Clients and select Install Roaming Client.
  2. Download the installer.
  3. Download the matching checksum file:

  4. Verify the checksum against the downloaded installer. If the filename contains a space, wrap the entire filename in quotes.

    gpg -o - --verify <installer-filename>.sha256sum.asc | "C:\Program Files\Gpg4Win\bin\sha256sum.exe" -c -

Replace <installer-filename>.sha256sum.asc with the exact name of the downloaded checksum file. For example, use DNSFilter-Agent-Setup-x64.msi.sha256sum.asc for the Standard x64 unversioned file.

A successful check returns: DNSFilter-Agent-Setup-x64.msi OK

A failed check returns: DNSFilter-Agent-Setup-x64.msi FAILED

If the verification fails, download the installer again and run the commands again.

Verify a versioned Windows installer

The checksum links are for unversioned files, which validate unversioned installer downloads. Unversioned files track the current Stable release and can take up to 24 hours to reflect the latest release. Use versioned checksum files when pinning to a specific build. To verify a versioned installer, build the matching versioned .asc URL by replacing the filename with the versioned equivalent:

Standard Agent x64

https://downloads.dnsfilter.com/User_Agent/Windows/DNSFilter-Agent-Setup-x64-3.4.23.msi.sha256sum.asc

Standard Agent ARM64

https://downloads.dnsfilter.com/User_Agent/Windows/DNSFilter-Agent-Setup-arm64-3.4.23.msi.sha256sum.asc

Legacy Whitelabel Agent x64

https://downloads.dnsfilter.com/User_Agent/Windows/DNS-Agent-Setup-x64-3.4.23.msi.sha256sum.asc

Legacy Whitelabel Agent ARM64

https://downloads.dnsfilter.com/User_Agent/Windows/DNS-Agent-Setup-arm64-3.4.23.msi.sha256sum.asc

Replace 3.4.23 with the version number of the installer downloaded from the dashboard.

Verify the macOS installer

Step one: Install GPG with Homebrew

  1. Install Homebrew.
  2. From Terminal, install GPG with one of these commands: brew install gpg or brew install gnupg

Step two: Import the DNSFilter public key

  1. Download the public key.
  2. Save the key to dnsfilter_public.asc

  3. Import the public key:

    gpg --import dnsfilter_public.asc

Step three: Download the installer and checksum file, then verify

  1. From the DNSFilter dashboard, navigate to Deployments > Roaming Clients and select Install Roaming Client.
  2. Download the installer.
  3. Download the matching checksum file:

  4. From Terminal, verify the checksum against the downloaded installer:

    gpg -o - --verify '<installer-filename>.pkg.sha256sum.asc' | shasum -a 256 -c

Replace <installer-filename>.pkg.sha256sum.asc with the exact name of the downloaded checksum file. For example, use DNSFilter Agent-2.3.13-Installer.pkg.sha256sum.asc for the Standard versioned file.

A successful check returns: DNSFilter Agent-2.3.13-Installer.pkg: OK

A failed check returns: DNSFilter Agent-2.3.13-Installer.pkg: FAILED

If the verification fails, download the installer again and run the commands again.

Verify a versioned macOS installer

The checksum links are for unversioned files, which validate unversioned installer downloads. Unversioned files track the current Stable release and can take up to 24 hours to reflect the latest release. Use versioned checksum files when pinning to a specific build. To verify a versioned installer, build the matching versioned .asc URL by replacing the filename with the versioned equivalent:

Standard Agent

https://downloads.dnsfilter.com/User_Agent/MacOS/DNSFilter%20Agent-2.3.13-Installer.pkg.sha256sum.asc

Legacy Whitelabel Agent

https://downloads.dnsfilter.com/User_Agent/MacOS/DNS%20Agent-2.3.13-Installer.pkg.sha256sum.asc

Replace 2.3.13 with the version number of the installer downloaded from the dashboard.

Related content

Was this article helpful?
0 out of 0 found this helpful
Return to top

Comments

0 comments

Article is closed for comments.