-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-processmaker-16.0-buster-amd64-vmdk.zip.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-processmaker-16.0-buster-amd64-vmdk.zip
      f4e8bffc88b3a46e502ae295468aa37667393e72aa09e9b74ee5e3f733f27fdf  turnkey-processmaker-16.0-buster-amd64-vmdk.zip

    $ sha512sum turnkey-processmaker-16.0-buster-amd64-vmdk.zip
      9cb7a29f2b26d182714f04505cebaa69a9041ae1dee033eb8bac0c89449baaa67d07fe011ed34922f8455df2cd7bf89053e5dda282a0e9af89d7630d4472cde8  turnkey-processmaker-16.0-buster-amd64-vmdk.zip

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-processmaker-16.0-buster-amd64-vmdk.zip.hash
      turnkey-processmaker-16.0-buster-amd64-vmdk.zip: OK

    $ sha512sum -c turnkey-processmaker-16.0-buster-amd64-vmdk.zip.hash
      turnkey-processmaker-16.0-buster-amd64-vmdk.zip: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=6fRu
-----END PGP SIGNATURE-----