Environment

• This article describes a deprecated feature in Snow Inventory Agent for Windows 3-6. Snow Inventory Agent for Windows 7 does not support snow-ps1 script.
• To validate authenticity you can use the Powershell cmdlet Get-AuthenticodeSignature on the ps1 file in question. You will find "Snow Software AB" as the signer.
• You can verify the authenticity of Snow's encrypted Powershell scripts deployed and used by the Inventory Agent by comparing the checksums of your snow-ps1 scripts against the available sha256 checksums of all snow-ps1 files provided by Snow. 

How do I check this? 

Please refer to the manual of the tool that your IT team have selected for the purpose of verifying the checksums of files.  For example, on MacOS and Linux you could use a command line utility called shasum .  Alternatively, on windows you could use the certutil command-line utility or the Get-FileHash CmdLet. 

• A file with the checksums (for the current versions of the scripts as at February 2024) is attached to this article (sha256-agent-ps-scripts.json).  The checksums use the SHA256 algorithm. 
• Later versions of the scripts will no longer use encryption but will be digitally signed. 

All checksums should match, and no additional encrypted files with the file extension snow-ps1 should exist, unless you've explicitly created them by using a custom encryption key for your custom scripts. 

• You may find the attached powershell script (Validate-AgentPS1Scripts.ps1) helpful.  This compares the json file with the snow-ps1 file in a specified folder. 

Below is an image showing an example output from running the attached Validate-AgentPS1Scripts.ps1powershell script: 
  

Custom encryption and decryption of PowerShell scripts

For steps on encryption and decryption of PowerShell scripts please read the "Custom encryption and decryption of PowerShell scripts" section of this Snow Docs page.