Verify a File's MD5 Hash

IN THIS ARTICLE

Outlines how to generate and verify the MD5 hash of a downloaded file on Windows or Mac

REQUIREMENTS

• Certutil.exe on Windows
• Terminal on Mac OS X

DETAILS

When downloading critical files that must be correct in order to maintain business operations (e.g., an upgrade image for your Qumulo cluster), the files are often provided with a corresponding MD5 file that represents the main file's unique signature. The MD5 provides a 128-bit hash value that can be compared to a known value to verify that the file has not been corrupted or tampered with during the download process. The steps below describe how to use this MD5 file along with a locally-generated MD5 for the file you've downloaded to ensure they match (and therefore that your downloaded file is valid).

Qumulo provides the MD5 hash for Qumulo software in the same location that the software itself is hosted. In the example below, we outline the process using the Qumulo upgrade file (available via the Qumulo Care team), which has a file extension of qimg.

Once both files are downloaded, use the instructions below to verify that the file is correct and unmodified using the platform of your choice.

Verify a File's MD5 Hash on Windows

1. Press the Windows Key+R to open the Run dialog box.
2. Type cmd to open a Command Prompt.
3. Navigate to the folder that contains the downloaded files using the following command:
   

   D:\> cd Qumulo\3.1.4\

4. Use the certutil -hashfile command to generate the file's hash.
   

   D:\Qumulo\3.1.4>certutil -hashfile qumulo_core_3.1.4.qimg MD5
   MD5 hash of qumulo_core_3.1.4.qimg:
   bba768f47f3fa57cc42b77d31b2e1c5a
   CertUtil: -hashfile command completed successfully.

5. Open the MD5 file you downloaded previously (in our example, qumulo_core_3.1.4.qimg.md5.txt) and compare the generated hash with the displayed value. If the values don't match, re-download the files and try again.

Verify a File's MD5 Hash on Mac OS X

1. Open a Terminal (Applications > Utilities > Terminal) window.
2. Navigate to the folder that contains the downloaded files by running the following command:
   

   mac:~ user$ cd Qumulo\3.1.4\

3. Use the command below to generate the file's hash:
   

   mac:~ user$ md5 qumulo_core_3.1.4.qimg
   MD5 (qumulo_core_3.1.4.qimg) = bba768f47f3fa57cc42b77d31b2e1c5a
   

4. Open the MD5 file you downloaded previously (in our example, qumulo_core_3.1.4.qimg.md5.txt) and compare the generated hash with the displayed value. If the values don't match, re-download the files and try again.

RESOLUTION

You should now be able to successfully verify the MD5 hash of a downloaded file on Windows or Mac

ADDITIONAL RESOURCES

Qumulo Core Upgrades via UI

Get-FileHash using Windows PowerShell

Like what you see? Share this article with your network!