Proxmox Virtual Environment

proxmox-ve_9.0-1.iso
1.5G2025-08-05 SHA256: 228f948ae696f2448460443f4b619157cab78ee69802acc0d06761ebd4f51c3e
Show 4 older versions
proxmox-ve_6.4-1.iso
886M2021-04-28 SHA256: ab71b03057fdeea29804f96f0ff4483203b8c7a25957a4f69ed0002b5f34e607
proxmox-ve_5.4-1.iso
655M2019-04-11 SHA256: 6f02cb34d2c8effa49e86a07d27e668dc125dfb1b37ed09ebc26002bf9daf75e
proxmox-ve_4.4-eb2d6f1e-2.iso
522M2016-12-15 SHA256: fc40797ef103b63ca5156f009ee1fb6ea605bb9dfe2b0c443211c9c210cb54c9
proxmox-ve_3.4-102d4547-6.iso
649M2015-05-27 SHA256: 7ee18dbb4f1a6436615c0a8b3a169ecbc3d1eb6c8ae456d41bf210a7caac4ff1

Proxmox Backup Server

proxmox-backup-server_1.1-1.iso
678M2021-04-15 SHA256: d01d2cb3cac56ea2ebf0ed590db1199e44d8fd21b090d1b576e740abfa5e8d65

Proxmox Mail Gateway

proxmox-mailgateway_6.4-1.iso
977M2021-03-30 SHA256: e3da927685bf4849679d6b19a9cb7e5a8e531fc6a86fabea732a0f6013ba43ba
Show 1 older versions
proxmox-mailgateway_5.2-1.iso
756M2019-03-26 SHA256: f94959111557dc83c0a6131333608d9b562694f63ac91238813fe4f823426c8d
How to verify a downloaded ISO

Each ISO ships with a detached OpenPGP signature (.asc) signed by the matching release key. Examples below use proxmox-ve_9.0-1.iso; substitute the filename you downloaded.

Fetch the release key

Release keys are published at enterprise.proxmox.com/debian/ (not on public keyservers). Pick the one matching the ISO's release:

wget https://enterprise.proxmox.com/debian/proxmox-release-trixie.gpg

Display the fetched key's fingerprint and confirm it matches the value listed below before trusting it for any verification step:

gpg --show-keys ./proxmox-release-trixie.gpg
  • trixie (current): 24B30F06ECC1836A4E5EFECBA7BCD1420BFE778E
  • bookworm (previous): F4E136C67CDCE41AE6DE6FC81140AF8F639E0C39

Verify the signature

GnuPG (gpgv needs no keyring import):

gpgv --keyring ./proxmox-release-trixie.gpg \
     proxmox-ve_9.0-1.iso.asc proxmox-ve_9.0-1.iso

Sequoia (sq):

sq verify --signer-file ./proxmox-release-trixie.gpg \
          --signature-file proxmox-ve_9.0-1.iso.asc proxmox-ve_9.0-1.iso

Auditing the whole directory

The combined SHA256SUMS covers every ISO and is signed by both release keys in SHA256SUMS.asc:

gpgv --keyring ./proxmox-release-trixie.gpg \
     SHA256SUMS.asc SHA256SUMS && sha256sum -c SHA256SUMS

Clients still pinned to the previous release key (bookworm) can use the standalone signature:

gpgv --keyring ./proxmox-release-bookworm.gpg \
     SHA256SUMS.bookworm-key.asc SHA256SUMS