AVIRA ANTIVIR VIRUS SCAN ADAPTER FOR SAP SOLUTIONS User Manual page 27

Configuration (UNIX)
Verifying Updates Authenticity with GnuPG
GnuPG is a free alternative to the encryption program PGP (Pretty Good Privacy). Using
GnuPG you can verify the authenticity of the AntiVir Updates.
Follow these steps to activate GnuPG support:
Download GnuPG from the website http://www.gnupg.org. Here you can also find
the manual with further information on GnuPG and its features.
Generate your own PGP key pair, as described in the documentation.
Import the AntiVir public PGP key to your key-ring:
gpg --import antivir.gpg
– OR –
Import the AntiVir public key directly from the key server:
gpg --keyserver=wwwkeys.pgp.net --recv-keys 0F821C2E
Display the fingerprint of the key to check if it really is the AntiVir PGP key:
gpg --fingerprint build@avira.com
Check whether the fingerprint corresponds with the one on the AntiVir website
(http://www.avira.com).
Sign the AntiVir public key in order to certify its validity:
gpg --sign-key build@vira.com
Change to the /bin sub-directory of the AntiVir installation directory (example):
cd /tmp/antivir-vsa-prof-<version>/bin
Check the signature with:
gpg --verify antivir.asc antivir
Activate GnuPG for AntiVir. In /etc/avupdater.conf enter the path to GnuPG binaries,
using the option GnuPGBinary:
GnuPGBinary /usr/local/bin/gpg
Restart Internet Update Daemon to activate the new settings in avupdater.conf:
/usr/lib/AntiVir/avupdater restart
26
It is highly recommended to use GnuPG.
However, this procedure requires extensive knowledge of UNIX and
GnuPG. In the event of configuration errors, there is the danger of
deactivating AntiVir updates.
The user running updates on the computer has to perform these
steps. Usually it has to be a user with administrator rights.
You can find more details of GnuPG at
The 40-character fingerprint is displayed.
Here you can find the files antivir and antivir.asc.
If you do not get any error message, you can use GnuPG for AntiVir updates.
You can only edit this option in avupdater.conf manually. Setting in
the configuration script is not possible in order to avoid the danger of
configuration errors.
From now on, GnuPG authenticates the updates.
AntiVir Virus Scan Adapter
http://www.gnupg.org
Avira GmbH