- 24 Mar 2022
- 1 Minute To Read
-
Print
-
DarkLight
-
PDF
Export Package Integrity
- Updated On 24 Mar 2022
- 1 Minute To Read
-
Print
-
DarkLight
-
PDF
Overview
For Self-hosted accounts, Whatfix content is downloaded using the Export option on the Dashboard and the content is hosted on your own servers.
For more information, see Hosting content on a Private server.
The export package of the content created is sent as a downloadable link to your registered email address. This package is then hosted on your servers for Whatfix to fetch and deploy content to your end-users.
The export package download link is valid for 6 hours and so ensuring the integrity of the package is necessary to avoid issues which may result in a security threat for your organization.
Export Package Integrity
The Export Package Integrity in Whatfix enables you to validate the integrity of the content export package ensuring that the package is secure to be hosted on your servers.
With every export you perform on the Dashboard, Whatfix creates a SHA 256 checksum value dedicated to that particular export package.
To access the export checksum value on the Dashboard,
-
Navigate to the Whatfix Dashboard.
-
On the top right, click the Settings icon.
-
Click Configuration.
-
Click the Integrations tab.
-
Under the CHECKSUM section, you can find the checksum value for the recent export you’ve performed.
The email with the package download link contains the checksum value as well.
Checking the integrity of the export package
Once the package file is downloaded, your security team can find the checksum value of the package using the following command in terminal,
For Linux/Ubuntu:
sha256sum “path/tofile”
Any mismatch in these values implies modification of the export package. You can then choose to discard this package and export a secure one on the Dashboard again.