Saltar al contenido principal

How can we help you?

Búsqueda

help Knowledge Base
forum Community
checklist Release Notes
event Events

Add extra security with PGP/GPG programs

Bailey Taylor Community Manager DNSFilter Staff
  • Editado
Community Regular

Follow this guide to deploy the Windows or macOS Roaming Client with a PGP/GPG program.

PGP/GPG programs offer an additional layer of security to protect electronic communications. These are optional installation steps if extra security is needed.

Windows PGP/GPG Installation 

Step one: Download the PGP/GPG 

  1. Download PGP/GPG

Optionally, add the installation directory to the path. This creates a shortcut to type just "gpg" from the command line rather than C:\Program Files\Gpg4win\bin

  1. From the Windows device, navigate to the Settings Control Panel and open System
  2. Select Advanced
  3. Select Environment Variables 
  4. Edit Path

    1. Add this value to the end of the path: 

      ; C:\Program Files\Gpg4win\bin
  5. Select OK until the System dialog closes

Step two: Download the DNSFilter public key

  1. Download the public key
  2. Save the key, e.g. C:\Users\Joe\Desktop\dnsfilter-public-key.asc
  3. Import the public key 
    gpg --import C:\Users\Joe\Desktop\dnsfilter-public-key.asc

Step three: Download the Roaming Client Installer and Checksum file

  1. From the DNSFilter dashboard, navigate to Deployments and select Roaming Clients
  2. Tab to Install

  3. Download the installer
    Optionally, download the installer.sha256sum.asc checksum file to verify the file integrity

    Standard Agent

    MSP/Whitelabel Agent

  4. Verify the checksum against the downloaded installer. 💡 Pro Tip: If the file has a space in it, the command should wrap the entire filename in quotes:

    gpg -o - --verify <installer-filename>.sha256sum.asc | "C:\Program Files\Gpg4Win\bin\sha256sum.exe" -c -

Replace <installer-filename>.sha256sum.asc with the exact name of the checksum file downloaded — for example, DNSFilter_Agent_Setup.msi.sha256sum.asc for the Standard x64 un-versioned file.

Successful MSI installer line return: DNSFilter_Agent_Setup.msi OK

Unsuccessful MSI installer line return: DNSFilter_Agent_Setup.msi FAILED

If the verification fails, re-download and try running the commands again to verify.

The checksum links above are for un-versioned files, which validate un-versioned installer downloads. These may take up to 24 hours to reflect the latest release. The dashboard now returns versioned installer downloads. To verify a versioned installer, construct the matching versioned .asc URL by replacing the filename with the versioned equivalent:

  • Standard x64: https://download.dnsfilter.com/User_Agent/Windows/DNSFilter-Agent-Setup-x64-3.4.23.msi.sha256sum.asc
  • Standard ARM64: https://download.dnsfilter.com/User_Agent/Windows/DNSFilter-Agent-Setup-arm64-3.4.23.msi.sha256sum.asc
  • MSP/Whitelabel x64: https://download.dnsfilter.com/User_Agent/Windows/DNS-Agent-Setup-x64-3.4.23.msi.sha256sum.asc
  • MSP/Whitelabel ARM64: https://download.dnsfilter.com/User_Agent/Windows/DNS-Agent-Setup-arm64-3.4.23.msi.sha256sum.asc

Replace 3.4.23 with the version number of the installer downloaded from the dashboard.

macOS PGP/GPG Installation 

Similar steps can be followed for verifying the file checksum via PGP on Linux.

Step one: Download and install brew gpg

  1. Download brew gpg 
  2. From Terminal, use these commands to install GPG: brew install gpg or brew install gnupg

Step two: Download the DNSFilter public key

  1. Download the public key
  2. Save the key to dnsfilter_public.asc

  3. Import the public key

    gpg --import dnsfilter_public.asc

Step three: Download the Roaming Client Installer and Checksum file

  1. From the DNSFilter dashboard, navigate to Deployments and select Roaming Clients
  2. Tab to Install

  3. Download the installer
    Optionally, download the installer.sha256sum.asc checksum file to verify the file integrity

    Standard Agent

    MSP/Whitelabel Agent

  4. Verify the checksum against the downloaded installer

  5. From Terminal, run this command: 

    gpg -o - --verify '<installer-filename>.pkg.sha256sum.asc' | shasum -a 256 -c

Replace <installer-filename>.pkg.sha256sum.asc with the exact name of the checksum file downloaded — for example, DNSFilter Agent-2.3.13-Installer.pkg.sha256sum.asc for the Standard versioned file.

Successful MSI installer line return: DNSFilter Agent-2.3.13-Installer.pkg: OK

Unsuccessful MSI installer line return: DNSFilter Agent-2.3.13-Installer.pkg: FAILED

If the verification fails, re-download and try running the commands again to verify.

The checksum links above are for un-versioned files, which validate un-versioned installer downloads. These may take up to 24 hours to reflect the latest release. The dashboard now returns versioned installer downloads. To verify a versioned installer, construct the matching versioned .asc URL by replacing the filename with the versioned equivalent:

  • Standard: https://download.dnsfilter.com/User_Agent/MacOS/DNSFilter Agent-2.3.13-Installer.pkg.sha256sum.asc
  • MSP/Whitelabel: https://download.dnsfilter.com/User_Agent/MacOS/DNS Agent-2.3.13-Installer.pkg.sha256sum.asc

Replace 2.3.13 with the version number of the installer downloaded from the dashboard.

--

Have questions about this deployment option? Share them in the comments below or create a new post!

0

Comentarios

0 comentarios

Iniciar sesión para dejar un comentario.

Nueva publicación

Publicaciones destacadas