topic I am having the same error in Intel® oneAPI Math Kernel Library

APT Repository not working (signatures invalid)

Christopher_G_2 — Fri, 27 Sep 2019 13:57:01 GMT

I'm using the steps from here and getting a GPG error: installing-intel-free-libs-and-python-apt-repo

Here are the steps I'm doing:

docker run -it -rm ubuntu:18.04 bash
apt-get update
apt-get install -y --show-progress curl gnupg
curl https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB | apt-key add -
echo 'deb https://apt.repos.intel.com/mkl all main' > /etc/apt/sources.list.d/intel-mkl.list
apt-get update

Here is the error (note: it is happening with the TBB repository as well:

root@fc9c5f2a3649:/# apt-get update
Hit:1 http://security.ubuntu.com/ubuntu bionic-security InRelease
Get:2 https://apt.repos.intel.com/mkl all InRelease [4430 B]               
Hit:3 http://archive.ubuntu.com/ubuntu bionic InRelease                         
Err:2 https://apt.repos.intel.com/mkl all InRelease                             
  The following signatures were invalid: EXPKEYSIG 1A8497B11911E097 "CN = Intel(R) Software Development Products", O=Intel Corporation
Hit:4 http://archive.ubuntu.com/ubuntu bionic-updates InRelease                
Hit:5 http://archive.ubuntu.com/ubuntu bionic-backports InRelease
Reading package lists... Done                      
W: GPG error: https://apt.repos.intel.com/mkl all InRelease: The following signatures were invalid: EXPKEYSIG 1A8497B11911E097 "CN = Intel(R) Software Development Products", O=Intel Corporation
E: The repository 'https://apt.repos.intel.com/mkl all InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

Same issue. It looks like the

Shastry__Tejas — Fri, 27 Sep 2019 14:13:22 GMT

Same issue. It looks like the key expired today. Not much we can do until Intel provides an updated key.

I tried to simply grab the `-2020.pub` key but it doesn't exist.

gpg GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.pub
gpg: WARNING: no command supplied.  Trying to guess what you mean ...
pub   rsa2048 2016-09-28 [SC] [expired: 2019-09-27]
      BF4385F91CA5FC005AB39E1C1A8497B11911E097
uid           "CN = Intel(R) Software Development Products", O=Intel Corporation

I am having the same error

Doe__John2 — Fri, 27 Sep 2019 16:08:47 GMT

I am having the same error since this morning.

I'm running into the same

Marchant__David — Fri, 27 Sep 2019 17:14:49 GMT

I'm running into the same problem trying to install MKL. Is there a workaround we can use while this is getting fixed?

wget https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB
sudo apt-key add GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB
sudo sh -c 'echo deb https://apt.repos.intel.com/ipp all main > /etc/apt/sources.list.d/intel-ipp.list'
sudo apt-get update
Err:12 https://apt.repos.intel.com/ipp all InRelease
  The following signatures were invalid: EXPKEYSIG 1A8497B11911E097 "CN = Intel(R) Software Development Products", O=Intel Corporation
Reading package lists...
W: GPG error: https://apt.repos.intel.com/ipp all InRelease: The following signatures were invalid: EXPKEYSIG 1A8497B11911E097 "CN = Intel(R) Software Development Products", O=Intel Corporation
E: The repository 'https://apt.repos.intel.com/ipp all InRelease' is not signed.
W: GPG error: https://apt.repos.intel.com/ipp all InRelease: The following signatures were invalid: EXPKEYSIG 1A8497B11911E097 "CN = Intel(R) Software Development Products", O=Intel Corporation

I see this problem too, today

Bau__David — Fri, 27 Sep 2019 22:18:35 GMT

I see this problem too, today, setting up a new machine.

W: GPG error: https://apt.repos.intel.com/mkl all InRelease: The following signatures were invalid: EXPKEYSIG 1A8497B11911E097 "CN = Intel(R) Software Development Products", O=Intel Corporation

Quote:Marchant, David wrote:

KKats1 — Sun, 29 Sep 2019 09:14:00 GMT

Marchant, David wrote:
I'm running into the same problem trying to install MKL. Is there a workaround we can use while this is getting fixed?

Yes, but it involves disabling certain security checks. Better wait out till Monday. This should be fixed very quickly (I am not speaking for Intel, just reasoning the breakage is too extensive).

You can google for 'disable apt deb gpg security checks' or something, but I strongly advise against.

Thanks for the report. the

Gennady_F_Intel — Mon, 30 Sep 2019 07:55:00 GMT

Thank you for the report. The issue is escalated and we will fix the issue asap.

We re-signed these packages.

Gennady_F_Intel — Tue, 01 Oct 2019 03:09:22 GMT

We re-signed these packages. You may try these right now and let us know the result.

I think this is still broken

iain_B_ — Tue, 01 Oct 2019 07:13:44 GMT

I think this is still broken - the keys file is missing the public key for ACFA9FC57E6C5DBE.

I had to remove ppa and gpg

Bankevich__Sergey — Tue, 01 Oct 2019 08:03:30 GMT

I had to remove ppa and gpg added in attempts to fix the issue. And seems everything worked for me. From the second run though for some reason.

ok, thanks for the update

Gennady_F_Intel — Tue, 01 Oct 2019 08:45:07 GMT

ok, thanks for the update

Actually, I see two errors -

iain_B_ — Tue, 01 Oct 2019 08:57:08 GMT

Actually, I see two errors - the MKL repo is missing the public key, and the TBB repo's key is expired.

W: GPG error: https://apt.repos.intel.com/mkl all InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
E: The repository 'https://apt.repos.intel.com/mkl all InRelease' is not signed.
W: GPG error: https://apt.repos.intel.com/tbb all InRelease: The following signatures were invalid: EXPKEYSIG 1A8497B11911E097 "CN = Intel(R) Software Development Products", O=Intel Corporation
E: The repository 'https://apt.repos.intel.com/tbb all InRelease' is not signed.

For a temporary workaround, I

Christopher_G_2 — Tue, 01 Oct 2019 10:47:00 GMT

NOTE: Don't do this if it's fixed but just for reference as a temporary workaround, I did this (added trusted=yes):

echo 'deb [trusted=yes] https://apt.repos.intel.com/mkl all main' > /etc/apt/sources.list.d/intel-mkl.list
echo 'deb [trusted=yes] https://apt.repos.intel.com/tbb all main' > /etc/apt/sources.list.d/intel-tbb.list

there seems to be a 2023 GPG

Dau__Hendrik — Tue, 01 Oct 2019 18:43:06 GMT

there seems to be a 2023 GPG in the same location -- since august this year

unfortunately not the signing key ACFA9FC57E6C5DBE

curl -i https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2023.PUB
HTTP/1.1 200 OK
x-amz-id-2: ltMvKgVn4IHCanE8jDwfmeYf/DUwWH1d3pg51XV8E0l1VCVtQb3RXKhr6VhNdulEDgdfEGPnnm4=
x-amz-request-id: 5D35760EF2A7623C
Last-Modified: Wed, 07 Aug 2019 10:59:16 GMT
ETag: "03f42e09f49c10569aecb8eb67c233a4"
x-amz-server-side-encryption: AES256
x-amz-version-id: i2bIl68sDY2acaLiXWGZn.rlplQos505
Accept-Ranges: bytes
Content-Type: binary/octet-stream
Content-Length: 914
Server: AmazonS3
Date: Tue, 01 Oct 2019 18:40:59 GMT
Connection: keep-alive

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=
=rudQ
-----END PGP PUBLIC KEY BLOCK-----

Also still seeing this:

Ceravolo__Matthew — Tue, 01 Oct 2019 19:38:17 GMT

Also still seeing this:

The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE

actually the new public key

Gennady_F_Intel — Wed, 02 Oct 2019 03:33:40 GMT

actually the new public key is added to the same file (https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB).

as our install engineers suggested, please re-install public key following instructions: https://software.intel.com/en-us/articles/installing-intel-free-libs-and-python-apt-repo).

i don't think the new key has

Dau__Hendrik — Wed, 02 Oct 2019 12:25:16 GMT

i don't think the new key has been pushed out to the public URL (yet) ... just tested it.

root@71437e83e0ac:/# wget https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB
--2019-10-02 12:20:23--  https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB
Resolving apt.repos.intel.com (apt.repos.intel.com)... 104.82.98.127
Connecting to apt.repos.intel.com (apt.repos.intel.com)|104.82.98.127|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 975 [application/octet-stream]
Saving to: 'GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB'

GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PU 100%[======================================================================>]     975  --.-KB/s    in 0s

2019-10-02 12:20:23 (10.6 MB/s) - 'GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB' saved [975/975]

root@71437e83e0ac:/# apt-key add GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB
OK
root@71437e83e0ac:/# apt-key list
/etc/apt/trusted.gpg
--------------------
pub   rsa2048 2016-09-28 [SC] [expired: 2019-09-27]
      BF43 85F9 1CA5 FC00 5AB3  9E1C 1A84 97B1 1911 E097
uid           [ expired] "CN = Intel(R) Software Development Products", O=Intel Corporation

MKL package intel-mkl-64bit

Bawa__Puneet — Wed, 02 Oct 2019 15:30:49 GMT

MKL package intel-mkl-64bit-2019.2-057 installation FAILED

Err:4 https://apt.repos.intel.com/intelpython binary/ InRelease
The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
Err:5 https://apt.repos.intel.com/mkl all InRelease
The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
Err:7 https://apt.repos.intel.com/ipp all InRelease
The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
Err:8 https://apt.repos.intel.com/tbb all InRelease
The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
Err:10 https://apt.repos.intel.com/daal all InRelease
The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
Err:11 https://apt.repos.intel.com/mpi all InRelease
The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
Reading package lists... Done
W: GPG error: https://apt.repos.intel.com/intelpython binary/ InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
E: The repository 'https://apt.repos.intel.com/intelpython binary/ InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: https://apt.repos.intel.com/mkl all InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
E: The repository 'https://apt.repos.intel.com/mkl all InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: https://apt.repos.intel.com/ipp all InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
E: The repository 'https://apt.repos.intel.com/ipp all InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: https://apt.repos.intel.com/tbb all InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
E: The repository 'https://apt.repos.intel.com/tbb all InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: https://apt.repos.intel.com/daal all InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
E: The repository 'https://apt.repos.intel.com/daal all InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: https://apt.repos.intel.com/mpi all InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
E: The repository 'https://apt.repos.intel.com/mpi all InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
extras/install_mkl.sh: MKL package intel-mkl-64bit-2019.2-057 installation FAILED.

Seemed to help on most of the

Otruba__Jakub — Wed, 02 Oct 2019 16:50:16 GMT

Seemed to help on most of the packages, but im still getting the same "invalid signature" when getting daal

> actually the new public key

Hayashi__Junya — Thu, 03 Oct 2019 03:26:52 GMT

> actually the new public key is added to the same file (https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB).

I downloaded the key now, but it's still not changed.