Ref# T2025_23 | Date: Sep 30th 2025

---

Only download software from official vendor sites and check the installer’s digital signature or publisher before running it. Right-click the downloaded file → Properties → Digital Signatures (or use Sign Tool) to confirm the signer is a trusted vendor and the signature is valid and time-stamped. If the signature is missing, invalid, or shows an unfamiliar publisher, do not install, verify the file with your IT team or the vendor first.

PDF Download: Verify Installers and Digital Signatures

References

• (2025). Use SignTool to verify a file signature. Microsoft Learn. Retrieved September 30, 2025, from https://learn.microsoft.com/en-us/windows/win32/seccrypto/using-signtool-to-verify-a-file-signature
• National Institute of Standards and Technology (NIST). (2018). Security Considerations for Code Signing (White Paper). Retrieved September 30, 2025, from https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.01262018.pdf