Solved

A question about MD5 and SHA-1 checking

Posted on 2014-04-24
5
526 Views
Last Modified: 2014-06-17
Hi, not sure if this can get an answer or not. I have been reading some info on checking the authenticity of a down loaded file using a MD5 and SHA checksum utility. I downloaded a program from "Raymonds worldpress" and have run the utility against a windows server 2012 ISO file that i downloaded from Microsoft. It runs and gives me the results but here's the thing... How do i know that the results are as they should be? Should i be looking for the original hash results from in this case Microsoft.
I hope that this makes some sense and any help is much appreciated.
Cheers
Jason
0
Comment
Question by:Jason Thomas
5 Comments
 
LVL 93

Assisted Solution

by:John Hurst
John Hurst earned 167 total points
ID: 40020735
I use DigestIt 2004. Despite the date, it works on everything up to and including my Windows 8.1 Pro 64-bit machine.

When I download the ISO, I get the MD5 Checksum, save it in Notepad temporarily, run DigestIt, input the MD5 Checksum and let it run.

If it verifies (always does from VMware), then the download is good.
0
 
LVL 119

Accepted Solution

by:
Andrew Hancock (VMware vExpert / EE MVE^2) earned 167 total points
ID: 40020761
Yes, if Microsoft published, but they do not!

Download products from VMware and check them, they publish MD5 checksums!

Part 3: HOW TO: Create an ISO CD-ROM/DVD-ROM image (*.iso), and MD5 checksum signature, for use with VMware vSphere Hypervisor 5.1 (ESXi 5.1)

Part 4: HOW TO: Upload an ISO CD-ROM/DVD-ROM image to a VMware datastore for use with VMware vSphere Hypervisor 5.1 (ESXi 5.1) using the vSphere Client, and checking its MD5 checksum signature is correct.

Most now use Download Managers (VMware and Microsoft) that does checking as large files are downloaded.

If no checksum is published at source, difficult to check!
0
 
LVL 62

Assisted Solution

by:gheist
gheist earned 166 total points
ID: 40024186
Apparently microsoft leaves them room to fingerprint download files and publishing checksums would be against that.
Sure you can download twice and compare checksums and come aout with idea that since they are same files are downloaded ok.
0
 
LVL 1

Author Closing Comment

by:Jason Thomas
ID: 40024410
Thanks chaps.
0
 
LVL 2

Expert Comment

by:artisancomputer_msm
ID: 40139660
I use FCIV, free utility from Microsoft.  Then I google the result.  If someone else out there on the Internet has posted the same exact hash for the ISO then that's good enough for me.  It would be nice if Microsoft would provide the SHA hashes and MD5sums with the download.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

When converting a physical machine to a virtual machine using VMware vCenter Converter Standalone or vCenter Converter Enterprise, if an adapter type is not selected during the initial customization the resulting virtual machine may contain an IDE d…
A procedure for exporting installed hotfix details of remote computers using powershell
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

823 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question