Docs Menu

Verify Windows Packages

The MongoDB release team digitally signs Database Tools packages to certify that packages are a valid and unaltered MongoDB release. Before you install the Database Tools, you can use the digital signature to validate the package.

This page describes how to verify Windows .msi packages.

If you don't have the MongoDB Database Tools installed, download the Database Tools binaries from the Download Center.

To verify the Database Tools package on Windows, you can use one of these methods:

To verify Windows packages with PowerShell, run:

powershell Get-AuthenticodeSignature -FilePath <path_to_db_tools_msi>

If the package is signed, the command returns:

SignerCertificate Status Path
----------------- ------ ----
A5BBE2A6DA1D2A... Valid <path_to_db_tools_msi>
1
2

In the properties window, open the Digital Signatures tab.

If the package is properly signed, the Embedded Signatures show these properties:

Name of signer
Digest algorithm
Timestamp

MongoDB, Inc.

sha256

<Timestamp>