# 2️⃣ Update the package index sudo apt update
| Step | Action | |------|--------| | | The download page usually lists a hash (e.g., SHA256: 3a5f7b... ). After the download, open a terminal or PowerShell and run sha256sum <filename> (Linux/macOS) or Get-FileHash <filename> -Algorithm SHA256 (PowerShell). Compare the result. | | 2️⃣ Verify the digital signature | Windows executables are often signed with a code‑signing certificate. Right‑click → Properties → Digital Signatures and confirm the signer is “CDA Software Ltd.” | | 3️⃣ Use PGP/GPG if offered | Some vendors publish a PGP‑signed checksum file. Import the vendor’s public key and run gpg --verify . | | 4️⃣ Scan with a reputable antivirus | Even a clean signature can be spoofed; a quick scan adds an extra safety net. |
# 3️⃣ Install the specific version sudo apt install cda=6.14.0-1ubuntu1