The file *71478139_202402211535_Promag800_MODBUS_10006.sfu* contains the Device Driver version 1.00.06 which can be installed on the Promag 800 C Flowmeter.

The file *71478139_202402211535_Promag800_MODBUS_10006.sfu.asc* contains a cryptographic signature which can be used by an end-user to verify that the Device Driver is complete and has been created at Endress+Hauser Flowtec AG.

Procedure to verify the signature is as follows

1. Install at least version 2.2.40 of the GnuPG software (example Gpg4win)
2. Download the public key of the Software Department from Flowtec from the following https://keys.openpgp.org/vks/v1/by-fingerprint/D68810BD6803017227D00D08FCF71B41059ECBDD to the folder C:\Endress
3. Import the public key to the system with the following command
   C:\Endress>gpg --import D68810BD6803017227D00D08FCF71B41059ECBDD.asc

Output should be as follows:
   gpg: key FCF71B41059ECBDD: public key "Software Department EHFL <iiot.ehfl@endress.com>" imported
   gpg: Total number processed: 1
   gpg:               imported: 1

   
4. Verify that the public key is availabe in gpg as follows

	C:\Endress>gpg --list-keys
	
    Output should contain:

	pub   rsa4096 2024-03-06 [SC]
	D68810BD6803017227D00D08FCF71B41059ECBDD
	uid           [ unknown] Software Department EHFL <iiot.ehfl@endress.com>

	

5) Now change the directory to the directory containing the Promag 800 C device driver (asuming in C:\Firmware)
	
    C:\Endress>cd ..\Firmware
	
6) Verify that signature of the device driver with the following command
	
    C:\Firmware>gpg --local-user D68810BD6803017227D00D08FCF71B41059ECBDD --verify 71478139_202402211535_Promag800_MODBUS_10006.sfu.asc 71478139_202402211535_Promag800_MODBUS_10006.sfu
	
	If the device driver has been manipulated in any manner then output will look like so

	gpg: assuming signed data in '71478139_202402211535_Promag800_MODBUS_10006.sfu'
	gpg: Signature made 03/06/24 13:52:23 W. Europe Standard Time
	gpg:                using RSA key D68810BD6803017227D00D08FCF71B41059ECBDD
	gpg: BAD signature from "Software Department EHFL <iiot.ehfl@endress.com>" [unknown]
	
	i.e. it will contain the text 
        gpg: BAD signature from "Software Department EHFL <iiot.ehfl@endress.com>"

	
	If the Device driver is orignial and unmanipulated, then the output will look like the following - 

	gpg: Signature made 03/06/24 13:52:23 W. Europe Standard Time
	gpg:                using RSA key D68810BD6803017227D00D08FCF71B41059ECBDD
	gpg: Good signature from "Software Department EHFL <iiot.ehfl@endress.com>" [unknown]
	gpg: WARNING: This key is not certified with a trusted signature!
	gpg:          There is no indication that the signature belongs to the owner.
	Primary key fingerprint: D688 10BD 6803 0172 27D0  0D08 FCF7 1B41 059E CBDD

	
	Only if the followin text is visible in the output, then the device driver's must be installed on the Flowmeter.

        gpg: Good signature from "Software Department EHFL <iiot.ehfl@endress.com>"
