Xton Technologies Software Binary Distribution and Signatures

XTAM Binary Components with MD5, SHA512 and PGP signatures

Windows Interactive Setup (md5, sha512, pgp)
Windows CLI Setup (md5, sha512, pgp)
Linux Setup (md5, sha512, pgp)
Offline Setup (md5, sha512, pgp)
WEB GUI and Worker Module (md5, sha512, pgp)
Directory Service Module (md5, sha512, pgp)
Runtime Framework for Windows (md5, sha512, pgp)
Runtime Framework for Linux x86 (md5, sha512, pgp)
Runtime Framework for Linux ARM (md5, sha512, pgp)
WEB Session Manager for Windows (md5, sha512, pgp)
WEB Session Manager for Linux x86 (md5, sha512, pgp)
WEB Session Manager for Linux ARM (md5, sha512, pgp)
Federated Sign-In Module (md5, sha512, pgp)
WEB Container Module (md5, sha512, pgp)

PGP public key ID: 4E8BCE41BA2F3FAF787D20FB9DA0CC93A1946EE0

XTAM Component Integrity

To verify the integrity of each Xton Technologies binary, we provide the MD5 and SHA-512 checksums and an OpenPGP signature. After you download any binary, you should calculate a checksum for your download and make sure if matches ours above. You may also match the OpenPGP signature against the provided key file.

Windows Integrity Check

You can use Microsoft methods to check the binary’s checksum or any other method you are comfortable using. In the example below, we will use CertUtil in PowerShell to calculate the hashes.

Copy both the downloaded binary and the MD5 or SHA512 hash file to the same directory and from within this location execute the command:

MD5:
```
CertUtil -hashfile <FILE> MD5
```
SHA512:
```
CertUtil -hashfile <FILE> SHA512
```

Compare the computed hash to make sure it matches the value from the download hash file.

You can verify the PGP signature using the below command, if available, or another Windows-based OpenPGP verification tool like Gpg4win.

PGP:
```
gpg --verify <FILE.asc>
```

Linux Integrity Check

To verify hashes on Linux, copy both the downloaded binary and the MD5 or SHA512 hash file to the same directory and from within this location execute the command:

MD5:
```
md5sum <FILE>
```
SHA512:
```
shasum -c <FILE.sha512>
```

Compare the computed hash to make sure it matches the value from the download hash file.

You can verify the PGP signature using the below command from this same directory with the downloaded PGP file:

PGP:
```
gpg --verify <FILE.asc>
```
PGP2:
```
gpg2 --verify <FILE.asc>
```

PGP Signature

To verify PGP signatures import the Xton Technologies, LLC public key using the following command or import the public key below:

gpg --keyserver hkp://pool.sks-keyservers.net --recv-keys 4E8BCE41BA2F3FAF787D20FB9DA0CC93A1946EE0

Xton Technologies, LLC public key: