minPort 0.9.0

Checking what you downloaded

The check you can actually perform here is the digest. On macOS or Linux run shasum -a 256 <file>; on Windows run Get-FileHash <file>. It must equal the SHA-256 in the card above. That tells you the file arrived intact.

It does not tell you the file is genuine. The digest on this page and the file it describes come from the same place, so anyone able to alter one could alter the other. Treat the digest as a transfer check, not as proof of origin.

Each download also has a detached .signature.json beside it. Verifying that signature needs the Ed25519 public key update-public-key.pem, and this site does not serve that key, deliberately — a key fetched from the same origin as the thing it vouches for proves nothing. Get it from a channel that is not this website: it is installed beside minagentctl on any host with the Operator package, and ships inside every Operator archive, Agent release and DMZ bundle. Then rename the download back to its canonical name (the signature covers that name, not the short one) and verify:

minport-windows-amd64.exe → SafeStorz-minPort-0.9.0-windows-amd64.exe

If you have no trusted copy of the key, the digest check above is what you have. This page makes no claim beyond it.