Verifying Integrity of an App SDK Package

Function

Check the integrity of downloaded SDK packages, that is, check whether the packages are tampered with or packets are lost during download.

Procedure

1. Obtain the download path of the Android/iOS/Windows/macOS/Electron UI SDK package from Downloading an App SDK.

2. Download the SDK package to your device.

3. Open the CLI and run the following command to generate the SHA-256 value of the downloaded SDK package. In the command, D:\hwmsdk-win-80.12.7.zip indicates the local path for storing the SDK package and the SDK package name. Replace it with the actual value.

certutil -hashfile D:\hwmsdk-win-80.12.7.zip SHA256

The following is an example of the command output:

SHA256 D:\hwmsdk-win-80.12.7.zip hash:
85a691c46a56572ea092945e9565f7927e6c1b4c612b35d01b1c8a9524f8c498 
CertUtil: -hashfile Command executed

Compare the generated SHA-256 value with that listed in the package download path table. If they are the same, no tampering or packet loss occurred during download.