Security
Secure Image Delivery
ArkDeploy treats Windows images as sensitive artifacts. Every delivered image is transferred securely and includes integrity verification so customers can independently confirm that the image they receive is complete and unmodified.
This page outlines how ArkDeploy delivers Windows images and what customers can expect as part of the handover process.
Secure Delivery Method
Final Windows images are delivered using secure, encrypted file transfer with controlled access.
- Encrypted cloud storage is used for delivery
- Download links are password protected
- Links are time-limited and automatically expire
- Passwords are shared separately from the download link
Where preferred, ArkDeploy can also deliver images via customer-provided secure storage such as OneDrive or SharePoint.
Offline Build and Handling
All ArkDeploy images are created, serviced, and tested on a closed, offline build network.
- Images are never exposed to the public internet during build or validation
- No third-party installers or bundled tooling are introduced
- Only explicitly agreed components are included
Images are uploaded for delivery only after the build and validation process is complete.
Image Integrity Verification
Every delivered image includes an integrity hash so customers can verify the file after download.
What Is Included
- The final Windows image file (
.wimor.esd) - A corresponding SHA-256 hash file
The hash file contains the cryptographic hash value and the exact filename it applies to.
How to Verify the Image
Customers can verify image integrity using standard Windows tools.
PowerShell
Get-FileHash -Algorithm SHA256 <filename>
CertUtil
certutil -hashfile <filename> SHA256
If the calculated hash matches the supplied value, the image has been transferred correctly and has not been modified.
Delivery Confirmation and Retention
After delivery:
- Customers are encouraged to confirm successful download
- Delivery links are allowed to expire or are revoked
- ArkDeploy does not retain copies of customer images
Images are only retained if explicitly agreed as part of ongoing or repeat work.
Why This Matters
- Reduces the risk of corruption or tampering
- Supports audit and compliance requirements
- Ensures confidence in deployed images
This process is part of ArkDeploy’s standard delivery approach and is not an optional add-on.
Start Here
Questions About Secure Delivery?
If you have specific delivery or security requirements, feel free to raise them during your enquiry and ArkDeploy will be happy to accommodate where possible.
