The HardenedBSD build artifacts are signed with an SSH key. SSH keys are used so that artifacts can be validated using only tools included in the base operating system. First, download the SSH public key: $ fetch https://installers.hardenedbsd.org/pub/keys/ssh.pub.txt Then download the build artifact. For purposes of this documentation, the compressed memstick installation image for HardenedBSD 14