Important Notice: On February 29th, this community was put into read-only mode. All existing posts will remain but customers are unable to add new posts or comment on existing. Please feel to join our Community Discord for any questions and discussions.

Verify Source

Is there a way to verify the source of the .exe files that are being used in the package library with PDQ Deploy? I'm a newbie to this and just starting to figure this out, but would like to be able to verify where these install files come from. Thanks!

0

Comments

2 comments
Date Votes
  • Unfortunately it's going to be a manual process for you. If you have questions about specific packages I can show you how I verify them. In general we compare the SHA256/SHA1/MD5 hash of the files to what's provided on the publisher's website. For example, Mozilla posts a huge file of SHA256 hashes for each version like this: https://ftp.mozilla.org/pub/firefox/releases/64.0/SHA256SUMS

    0
  • Thanks!

    0