To validate that the file you've downloaded is not damaged and is the file that was meant to be downloaded, you should download also:
- the .asc file that accompanies the file you've downloaded (the files have the same name, one just has an additional .asc extention),
- the JYMAG-X.Y-sign-key.asc file, which contains the signing key.
Then, get GnuPG (or Gpg4Win), and:
1. Import the key using gpg --import JYMAG-X.Y-sign-key.asc
2. Verify the signature on the file you've downloaded, e.g.: gpg --verify JYMAG-X.Y-bin.tar.bz2.asc. If it says "Good signature", then everything is correct.
To install JYMAG using the binaries (the JYMAG-X.Y-bin.tar.bz2 file), just unpack the archive and copy the files you need to your chosen location. The dist directory is required.
Just double-click to run, and follow the displayed steps: choose what to install and where to install.
In order to verify the correctness of the installer:
1. Download also:
- the JYMAG-X.Y-root-cert.der file,
- the JYMAG-X.Y-sign-cert.cer file.
2. Open the Certificate Manager, e.g. by opening a command or shell prompt and typing certmgr.msc.
3. Add the JYMAG-X.Y-root-cert.der file to "Trusted Root Certification Authorities".
4. Add the JYMAG-X.Y-sign-cert.der file to "Trusted Publishers"/"Certificates". If the installer still shows that the publisher is unknown, add this file also to "Trusted Root Certification Authorities".
To install JYMAG, just double-click to run, and follow the displayed steps: choose what to install and where to install.