Signatures for Setup Downloads on Web Servers

Starting with Intrexx version 12.1.0

Starting with Intrexx version 12.1.0, INTREXX downloads and online updates are digitally signed to enhance security against tampering with the delivered files.

This affects downloads from the Intrexx Support Portal and the Intrexx Online Help. The Intrexx Download Manager for online updates in Intrexx Portal Manager automatically validates downloads.

The web servers contain signed files, which can be identified by the presence of a file with the same name but an additional ".asc" suffix next to the original file—for example:

intrexx-12.1.0.20250519.549668d-windows.zip

intrexx-12.1.0.20250519.549668d-windows.asc

The ASC file contains an OpenPGP signature that can be validated, for example, using the encryption program "GnuPG."

Our signature key is identified by a public fingerprint. It reads as follows:

8679D1BAA7DFA01ED8C39CF46830D53CA20CE310

Example using GnuPG

First, we'll save the public key in the GnuPG keychain:

Open the console and enter the following command:

gpg --receive-keys 8679D1BAA7DFA01ED8C39CF46830D53CA20CE310

Now you can verify the files using GnuPG:

Example:

gpg --verify intrexx-12.1.0.20250519.549668d-windows.asc intrexx-12.1.0.20250519.549668d-windows.zip

Determine the verification key

If verification is to be performed using a different tool, you can request the key at https://keys.openpgp.org.