How to use MD5 Checksum to validate downloaded archive (TAR) files

Products

• Security Information Manager

Issue/Introduction

To ensure a product binary is not corrupted, a md5sum can be performed.

Resolution

MD5 files are checksum files that ensure the downloaded archive (TAR) files were not damaged during transfer. To use MD5 to verify the download follow these steps:

1. Download the .MD5 and its corresponding .TAR file to the same folder on the appliance. The instructions that accompany the updates will instruct you to copy the files to the /tmp folder and this document will assume the files were transferred to the /tmp folder.
   
   • Note: When transferring files to the appliance using a file transfer utility such as WinSCP you must ensure that the files are transferred in BINARY mode. Most of these utilities will transfer files in ASCII mode, which will damage the files.
      
2. SSH to the appliance or access the console.
    
3. Acquire Root access by typing:
   su -
    
4. Provide the root password.
    
5. Change to the directory that you downloaded the .MD5 and .TAR files to.
   cd /tmp
    
6. Check the md5sum by typing:
   

   For Linux:

   md5sum -c <md5 filename>

   For Solaris:

   digest -v -a md5 <md5 filename>

   If you have only one md5 file in the folder, you can run:

For Linux:

md5sum -c *.md5

For Solaris:

digest -v -a *.md5

1. Note you must be in the same folder as the MD5 and TAR files when you run md5sum, you cannot type in the path to the MD5 file.

Example:

md5sum -c hotfix-451-6-30.md5

It should return "OK". Any other response indicates a corrupted file and you will need to transfer the files again to the /tmp folder.

Check the md5sum in Windows
You must use an application to use the downloaded files checksum using the md5. There is more than one available for free on the internet.

Use the one you prefer and follow its instructions on how to use it.