Start with the verified source
Obtain the download from a provider address confirmed by your organization or from its approved software catalog. Sponsored results and unfamiliar download mirrors can lead to altered or outdated installers. This guide deliberately does not link to an unverified package.
Match the package to the device
Check the operating system, its version, and processor architecture against the vendor’s stated requirements. On a managed computer, ask whether software must be installed by IT. A package intended for another operating system will not work simply because the name looks right.
Verify before running
Review the publisher and any security warning. If the provider supplies a checksum or digital signature, compare it using the provider’s own instructions. Do not bypass a security warning just to finish the installation; ask IT to verify the package.
Compare a package with the source
Before opening a downloaded installer, compare its filename, version, and publisher with information from the verified provider. A filename by itself is easy to imitate. When the provider publishes a checksum through a separate trusted channel, use its documented process to compare the downloaded file. If the package name or publisher is unexpected, delete nothing important and ask IT to investigate. Never supply administrator credentials to a prompt you cannot explain.
Choose the next step
| Situation | What to check |
|---|---|
| Version does not match the provider’s page | Stop and verify the package with IT. |
| Publisher is unfamiliar | Do not run it until the source has been confirmed. |
| Company device uses a software catalog | Install from that catalog under the device policy. |
A practical checklist
- Get the package from a verified source.
- Match the operating system and architecture.
- Review the publisher and security prompts.
- Install only if your organization allows it.