Operation Manual

108
1. Download the VeraCrypt self-extracting installation package.
2. In the Windows Explorer, click the downloaded file (‘VeraCrypt Setup.exe’) with the right
mouse button and select ‘Properties’ from the context menu.
3. In the Properties dialog window, select the ‘Digital Signatures’ tab.
4. On the ‘Digital Signatures’ tab, in the ‘Signature list’, double click the line saying "IDRIX".
5. The ‘Digital Signature Details’ dialog window should appear now. If you see the following
sentence at the top of the dialog window, then the integrity and authenticity of the package
have been successfully verified:
"This digital signature is OK."
If you do not see the above sentence, the file is very likely corrupted. Note: On some
obsolete versions of Windows, some of the necessary certificates are missing, which
causes the signature verification to fail.
How to Verify PGP Signatures
To verify a PGP signature, follow these steps:
1. Install any public-key encryption software that supports PGP signatures. For Windows,
you can download Gpg4win. For more information, you can visit
https://www.gnupg.org/.
2. Create a private key (for information on how to do so, please see the documentation for the
public-key encryption software).
3. Download our PGP public key from IDRIX website or from a trusted public key repository
(ID=0x54DDD393), and import the downloaded key to your keyring (for information on how
to do so, please see the documentation for the public-key encryption software). Please
check that its fingerprint is 993B7D7E8E413809828F0F29EB559C7C54DDD393.
4. Sign the imported key with your private key to mark it as trusted (for information on how to
do so, please see the documentation for the public-key encryption software).
Note: If you skip this step and attempt to verify any of our PGP signatures, you will receive
an error message stating that the signing key is invalid.
5. Download the digital signature by clicking the PGP Signature button next to the file you
want to verify (on one of the download pages).
6. Verify the downloaded signature (for information on how to do so, please see the
documentation for the public-key encryption software).