Verify your download
Every file we publish has a fingerprint — a long code that changes if even one character of the file changes. Check the fingerprint of the file you downloaded against the list below and you know, with certainty, that you received exactly what we published and that nobody altered it on the way.
RHOYLLE INNOVATION EMPIRE LLC · 8340 East Baseline Road, 3051, Mesa, AZ 85209, United States · Federal EIN 41-4452360. Downloads are served only over an encrypted connection from our own domain. The installers and collectors are plain text — your security team can read every line before running anything.
Windows
The Windows installer and SQL Server collector carry an Authenticode signature issued to John Bosco Gakumba (Mesa, AZ) by Microsoft ID Verified CS AOC CA 04, and are timestamped, so they stay trusted after the certificate expires. Right-click the file, choose Properties, then Digital Signatures to see it.
macOS
macOS files are signed with an Apple Developer ID certificate and notarised by Apple, so Gatekeeper opens them without the "unidentified developer" message. Run codesign -dv --verbose=2 on any file to see the authority, or spctl --assess -vv for the Gatekeeper verdict.
Fingerprints (SHA-256)
Loading fingerprints…
How to check, on your system
Open PowerShell in the folder you downloaded to and compare the value it prints with the one listed here.
Get-FileHash .\install-windows.ps1 -Algorithm SHA256 | Format-List
Open Terminal in the download folder. The first command checks the fingerprint, the second confirms the file carries our Apple publisher signature.
shasum -a 256 install-macos.sh codesign -dv --verbose=2 install-macos.sh
Verify one file, or download SHA256SUMS.txt and check everything at once.
sha256sum -c SHA256SUMS.txt --ignore-missing
Install the app from Google Play, the App Store, Huawei AppGallery or another official store. Store apps are verified by the store itself, so no manual check is needed. If you sideload an Android package, check its fingerprint on a computer first.
sha256sum rhoylle-sovereign.apk
Some systems warn about any file downloaded from the internet until the publisher's identity certificate is recognised. If you see such a message, check the fingerprint above first — if it matches, the file is genuine. You can also ask us for a signed confirmation letter on company letterhead for your change-approval record.
Nothing in the installers sends your data anywhere. The console, its repository and every collector run entirely inside your own network.
Automatic updating is switched off in this release. The Windows update helper that ships with 1.0.9 does not run correctly on the version of Windows PowerShell built into Windows Server, so we will not ask you to schedule it. A corrected, re-signed helper arrives with the next release.
Until then, updating is a deliberate, manual step: download the new files from this site, check each fingerprint against the list above, confirm the publisher signature, and replace the files on the machine. We tell you when a new release is published.