diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 573380c..9bc72f6 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -40,9 +40,12 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v3
-      - name: Install TPM Simulator
+      - name: Download and verify TPM Simulator
         run: |
           wget -O ibmtpm1682.tar.gz https://sourceforge.net/projects/ibmswtpm2/files/ibmtpm1682.tar.gz/download
+          echo "3cb642f871a17b23d50b046e5f95f449c2287415fc1e7aeb4bdbb8920dbcb38f  ibmtpm1682.tar.gz" | sha256sum -c -
+      - name: Install TPM Simulator
+        run: |
           mkdir tpm_simulator
           cd tpm_simulator
           tar -xf ../ibmtpm1682.tar.gz