[[!meta title="Verify the ISO image using Linux with Gnome"]]
You need to have the seahorse-nautilus
package
installed. It is already the case in Tails. In Debian or Ubuntu,
if you are unsure or want to install it, you can issue the following
commands:
sudo apt-get update sudo apt-get install seahorse-nautilus
The seahorse-nautilus
package is only available in:
If you are unable to install it, try [[verifying the ISO using the command line|verify_the_iso_image_using_the_command_line]].
If you are using Tails, you already have the signing key. Otherwise, first download Tails signing key:
[[!inline pages="lib/download_tails_signing_key" raw="yes"]]Your browser should propose you to open it with "Import Key". Choose this action. It will add Tails signing key to your keyring, the collection of OpenPGP keys you already imported:
[[!img import_key.png alt="What should Iceweasel do with this file? Open with: Import Key (default)" link="no"]]
You will get notified will the following message:
[[!img key_imported.png alt="Key Imported. Imported a key for Tails developers (signing key) <tails@boum.org>" link="no"]]
Now, download the cryptographic signature corresponding to the ISO image you want to verify:
[[!inline pages="lib/download_stable_i386_iso_sig" raw="yes"]]Your browser should propose you to open it with "Verify Signature". Choose this action to start the cryptographic verification:
[[!img verify_signature.png alt="What should Iceweasel do with this file? Open with: Verify Signature (default)" link="no"]]
Browse your files to select the Tails ISO image you want to verify. Then, the verification will start. It can take several minutes:
[[!img verifying.png alt="Verifying" link="no"]]
If the ISO image is correct you will get a notification telling you that the signature is good:
[[!img good_signature.png alt="Goog Signature" link="no"]]
If the ISO image is not correct you will get a notification telling you that the signature is bad:
[[!img bad_signature.png alt="Bad Signature: Bad or forged signature." link="no"]]