To verify the integrity of the plugin archive (that is, that the .zip file has officially been issued by One Identity and has not been tampered with before its extraction and uploading the plugin), complete the following steps. These also verify whether the plugin has been modified after upload or not.

This procedure only applies to plugins downloaded from the official repositories.

Prerequisites

  • Make sure that you have already uploaded a plugin.

    For more information on uploading plugins, see Uploading plugins.

To verify the integrity of a plugin

  1. Navigate to Basic Settings > Plugins.

  2. Select the plugin that you want to verify.

  3. Under Plugin details > Plugin integrity, click Check integrity.

    Figure 48: Basic Settings > Plugins > Plugin details — Verifying plugin integrity

    There are three integrity checks:

    • Plugin offline integrity > Zip checksum check

      This check verifies whether the recalculated checksum is the same as the checksum that has been stored in the configuration after uploading plugin.

    • Plugin offline integrity > Zip content check

      This check verifies whether the plugin runtime files are the same since you have uploaded the plugin .zip.

    • Online integrity check

      This check verifies whether the plugin .zip checksums match with the .zip checksums stored online.

      NOTE: The online integrity check works only if you have joined to Starling.

      For more information, see Starling integration

To verify the integrity of a plugin manually

  1. Under Plugin details > Plugin integrity > SHA256 checksum, click Copy.

  2. To verify the integrity of the plugin, compare this checksum with the checksum on the official download sites. You might find your plugin version under a previous product version.

    On the support portal:

    1. Navigate to the product page on the Support Portal that you have downloaded the plugin from. Click on the name of the plugin.

    2. Next to the sha256 section, you will see the checksum of the official One Identity plugin.

    On GitHub:

    1. Navigate to the GitHub plugin repository that you have downloaded the plugin from. Click on the name of the plugin.

    2. Navigate to the releases tab.

    3. Scroll to the specific release that you use.

    4. Under the SHA256 checksum section, you will see the checksum of the official One Identity plugin.

  3. Compare the checksum of the official One Identity plugin with the one you have copied from Plugin details > Plugin integrity > SHA256 checksum.