No RPM-GPG-KEY to import?

Latest response

I'm following the redhat6 security guide ( https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/pdf/Security_Guide/Red_Hat_Enterprise_Linux-6-Security_Guide-en-US.pdf ) and on page 22 it indicates that the initial RPM-GPG-KEY should be imported into the keyring database. However, I've mounted the installation iso and I see many RELEASE-NOTES-* and EULA* files but only RPM-GPG-KEY-redhat-beta and RPM-GPG-KEY-redhat-release. The same RPM-GPG-KEY-redhat-beta and RPM-GPG-KEY-redhat-release rpms are already under /etc/pki/rpm.gpg directory. I tried to figure out how to check if by default they might already be installed: "# rpm -qa gpg-pubkey*" , but it comes back empty. I've never used RHEL6 GPG keys before. Can anyone assist me with setting it up? I've searched the web and can't find any information if the RPM-GPG-KEY is not on the cdrom.

Responses

Ronnie,

Which version of the RHEL media are you using?

The following should resolve your issue (run as root).

rpm --import RPM-GPG-KEY-redhat-release

Red Hat also make their GPG signing keys available here:
https://access.redhat.com/security/team/key

I use this to import RPM gpg keys on RHEL 5, 6 and 7 (did not work on rhel 4):

rpm --import -vv /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-*

and that works for me, just tested on rhel 5, 6 and 7 yet again today.
NOTE: the "-vv" is not needed, but it shows you what happened.

thanks man...this sh*t is working....thanks thanks thanks ;)

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.