-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-processmaker-16.1-buster-amd64.ova.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-processmaker-16.1-buster-amd64.ova
      8a54fa7eea8c1f77d0a01237dea9bc1cab11606e8ceb937716fbe74972d10e44  turnkey-processmaker-16.1-buster-amd64.ova

    $ sha512sum turnkey-processmaker-16.1-buster-amd64.ova
      d87a5b8b65fce316e092239bcac51ca8a7e0e99b9dda2456c6ec90ce56508132bae566f35725f31496dc6f67097900323913e6a8c7468271e0498ac66e66fed4  turnkey-processmaker-16.1-buster-amd64.ova

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-processmaker-16.1-buster-amd64.ova.hash
      turnkey-processmaker-16.1-buster-amd64.ova: OK

    $ sha512sum -c turnkey-processmaker-16.1-buster-amd64.ova.hash
      turnkey-processmaker-16.1-buster-amd64.ova: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAmBh2OEACgkQrF6wBJPl
vByc/BAAgpyZKswdfexQ1j2FpBVGDmJmbuzZZgfUZWTmEPjF0yV3UK7TEN4EaEC+
VeMOQG/qwD0FdGFul5lhWJIqBDZ4wbTYg71/rJfxuChbxOlIfp2NOn0IHsrFeZJd
giaXjD55Btvr/fB/4M3PshA7b0EN3TW/i6RiMYxc9BMeuoB0AibQT/zIGXX0R9g1
amp5lfCw2Oqt2lmFuJvsgq477WMlWtRggqrVSeopwpZXYMUgp15aVSNC4b3qKgje
5XAlsrByrGNHz3UGKyp8A+72UjFjhFzk69RRy7yf7jLHqOieu5/u9jbblUdI4R5A
oexNSWZ/32cbIleanWIyiPAAXwB3uiDmng9+IV6pVXdhlP2sO6a6oKGAUloNuZYh
ANXhALip0TnC8s1XeBIkGPA2DY9KKq6SuSIG3c+QuIN+QvhgLnkfYG7J55UJVAl8
G7Hao4YBWmyO65kX0y4D755vT7Lz8+4i5+AxOPDGQhthnlHU3F/hzs85VN0UrhNa
kHztDxlq4yrDAvu9B33U3z7aVx0/i/vfsASF7981jh2yMbHM3zXwMsy4wN6i/MCc
DGNAgAim+n2w4pQtRnWziHcXhmOtf4dxJAgQYXKa1WXxb3bGH7/1HT1v/pfv2hi4
U9r/mubhTvSky657gI/XyUnnjcZ7vUzDi+L8XPnU1KU/oPjr5dQ=
=FazH
-----END PGP SIGNATURE-----