Upgrading PureMessage

This document describes how to upgrade to the latest version of PureMessage from a previous version. For a detailed explanation of the various types of PureMessage product updates, see the “PureMessage Versions and Platforms Support Policy”.

Digitally Signed Updates

PureMessage uses certificate validation to verify the authenticity of installations, upgrades, and all subsequent software and data updates. Downloads from Sophos are signed with a private key that matches the public key embedded in the PureMessage validator application. This offers protection in the event that someone attempts to spoof the Sophos website to make it appear as though you are downloading from a trusted source. If a data or software update is interrupted, a partial update is not applied. This ensures the validity and completeness of the download.

In addition, you can configure PureMessage to notify you via email when a download fails the verification. This is done by enabling email notifications for scheduled jobs (see the scheduler.conf man page for more information).