oneAPI Registration, Download, Licensing and Installation
Support for Getting Started questions related to download, Installation and licensing for Intel oneAPI Toolkits and software development tools.
1492 Discussions

The GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB expired

XuRoland
Employee
18,367 Views

I got this error when doing apt-get update.

W: GPG error: https://apt.repos.intel.com/oneapi all InRelease: The following signatures were invalid: EXPKEYSIG ACFA9FC57E6C5DBE Intel(R) Software Development Products
 
Check this file
 
I find it just expired
 

 

pub   rsa2048 2016-09-28 [SC] [expired: 2019-09-27]
      BF4385F91CA5FC005AB39E1C1A8497B11911E097
uid           "CN = Intel(R) Software Development Products", O=Intel Corporation
pub   rsa2048 2019-09-30 [SC] [expired: 2023-09-30]
      52ABD6E87E421793971873FFACFA9FC57E6C5DBE
uid           Intel(R) Software Development Products
pub   rsa2048 2019-07-26 [SC] [expired: 2023-07-26]
      E1BA4ECEFB0656C61BF9794936B9569B3F1A1BC7
uid           KEY-PIDT-PGP-20190726
pub   rsa2048 2020-05-18 [SC] [expires: 2024-05-18]
      6113D31362A0D280FC025AAB640736427872A220
uid           CN=Intel(R) Software Development Products (PREPROD USE ONLY)

 

36 Replies
Buddhika_C_
Novice
14,169 Views

I have the same goes like this :
Hit:6 https://apt.repos.intel.com/oneapi all InRelease
Err:6 https://apt.repos.intel.com/oneapi all InRelease
The following signatures were invalid: EXPKEYSIG ACFA9FC57E6C5DBE Intel(R) Software Development Products
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
4 packages can be upgraded. Run 'apt list --upgradable' to see them.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://apt.repos.intel.com/oneapi all InRelease: The following signatures were invalid: EXPKEYSIG ACFA9FC57E6C5DBE Intel(R) Software Development Products
W: Failed to fetch https://apt.repos.intel.com/oneapi/dists/all/InRelease The following signatures were invalid: EXPKEYSIG ACFA9FC57E6C5DBE Intel(R) Software Development Products
W: Some index files failed to download. They have been ignored, or old ones used instead.

I followed the link :-
Download the Intel® oneAPI Base Toolkit

apetroscy
Beginner
13,999 Views

Same problem here:

W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://apt.repos.intel.com/oneapi all InRelease: The following signatures were invalid: EXPKEYSIG ACFA9FC57E6C5DBE Intel(R) Software Development Products
W: Failed to fetch https://apt.repos.intel.com/oneapi/dists/all/InRelease  The following signatures were invalid: EXPKEYSIG ACFA9FC57E6C5DBE Intel(R) Software Development Products
W: Some index files failed to download. They have been ignored, or old ones used instead.

Any solutions?

0 Kudos
darldil
Beginner
13,877 Views

Hello,

It seems that it is still not working.
Any estimate of when the signature will be updated?

Br.

0 Kudos
Ying_S_Intel
Employee
13,757 Views

We are sorry for this inconvenience you've experienced.  The root of the problem was an internal issue, which has now been resolved.
Please follow the steps provided below and let us know if it is fixed:

Please run three commands:
1.  wget https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB

2. sudo apt-key add GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB

3. sudo apt update


Hope it helps. 

Thanks,
Ying S
Intel oneAPI Tools Product Team

0 Kudos
Surbhi
Beginner
13,712 Views

Hi @Ying_S_Intel 

I have updated this key but still getting error with openvino when doing apt-get update:

W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://apt.repos.intel.com/openvino/2021 all InRelease: The following signatures were invalid: EXPKEYSIG ACFA9FC57E6C5DBE Intel(R) Software Development Products
W: Failed to fetch https://apt.repos.intel.com/openvino/2021/dists/all/InRelease  The following signatures were invalid: EXPKEYSIG ACFA9FC57E6C5DBE Intel(R) Software Development Products

Do you have any solution for this?

Thanks,
Surbhi.

0 Kudos
Juhi_B_Intel
Moderator
13,687 Views

Surbhi, This issue has been fixed, please try again with the following instructions.

 

# download the key to system keyring

wget -O- https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB \

| gpg --dearmor | sudo tee /usr/share/keyrings/openvino-archive-keyring.gpg > /dev/null

 

# add signed entry to apt sources and configure the APT client to use Intel repository:

echo "deb [signed-by=/usr/share/keyrings/openvino-archive-keyring.gpg] https://apt.repos.intel.com/openvino/2021 all main" | sudo tee /etc/apt/sources.list.d/intel-openvino-2021.list

0 Kudos
Surbhi
Beginner
13,679 Views

Thanks @Juhi_B_Intel. Followed these steps and it is working now.

0 Kudos
leee
Beginner
13,653 Views

Hey Juhi,

 

I still see the following error when trying your post solution :
Hit:2 https://storage.googleapis.com/bazel-apt stable InRelease
Get:3 https://apt.repos.intel.com/mkl all InRelease [4438 B]
Err:3 https://apt.repos.intel.com/mkl all InRelease
The following signatures were invalid: EXPKEYSIG ACFA9FC57E6C5DBE Intel(R) Software Development Products
Hit:4 http://security.ubuntu.com/ubuntu focal-security InRelease
Hit:5 http://archive.ubuntu.com/ubuntu focal InRelease
Hit:6 http://archive.ubuntu.com/ubuntu focal-updates InRelease
Hit:7 http://archive.ubuntu.com/ubuntu focal-backports InRelease
Reading package lists... Done
W: GPG error: https://apt.repos.intel.com/mkl all InRelease: The following signatures were invalid: EXPKEYSIG ACFA9FC57E6C5DBE Intel(R) Software Development Products
E: The repository 'https://apt.repos.intel.com/mkl all InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

 

Can you help confirm? Thanks~

0 Kudos
Jordan_Heemskerk
Beginner
13,615 Views

Hello, 

I can confirm that the new public GPG keys are available, but it appears the MKL repo still needs to be re-signed with the new key.

 

W: GPG error: https://apt.repos.intel.com/mkl all InRelease: The following signatures were invalid: EXPKEYSIG ACFA9FC57E6C5DBE Intel(R) Software Development Products

E: The repository 'https://apt.repos.intel.com/mkl all InRelease' is not signed.

Is there any ETA on when this will be done?

Thanks,

Jordan

apetroscy
Beginner
13,465 Views

I still have the same issue:

W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://apt.repos.intel.com/openvino/2021 all InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY BAC6F0C353D04109
W: GPG error: https://apt.repos.intel.com/oneapi all InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY BAC6F0C353D04109
E: The repository 'https://apt.repos.intel.com/oneapi all InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

 

0 Kudos
jseiler
Beginner
13,212 Views

Hello,

We are also experiencing the same issue as @Jordan_Heemskerk is facing. 
It seems that the package is not signed with the key that is available at: 

https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB


Here's the output that we're seeing:

#13 5.934 Get:6 https://apt.repos.intel.com/mkl all InRelease [4438 B]                              
#13 6.023 Err:6 https://apt.repos.intel.com/mkl all InRelease                                       
#13 6.023   The following signatures were invalid: EXPKEYSIG ACFA9FC57E6C5DBE Intel(R) Software Development Products                                                                                    
#13 6.026 Reading package lists...                                                                  
#13 6.883 W: GPG error: https://apt.repos.intel.com/mkl all InRelease: The following signatures were
 invalid: EXPKEYSIG ACFA9FC57E6C5DBE Intel(R) Software Development Products                         
#13 6.883 E: The repository 'https://apt.repos.intel.com/mkl all InRelease' is not signed.   

 

Is there an ETA on this?


Thanks,

Joseph 

0 Kudos
jseiler
Beginner
12,748 Views

Seems to be working again.

 

Thanks @Juhi_B_Intel 

0 Kudos
joonash
Beginner
13,747 Views

Now it works.

0 Kudos
darldil
Beginner
13,363 Views

Hello,

Some repositories are still not working.
In the https://apt.repos.intel.com/oneapi all InRelease repository the new key is working. But in the https://apt.repos.intel.com/mkl all InRelease repository it still doesn't work.

Is there any estimate when it will be fixed for all repositories?

Br.

Doron
Beginner
13,330 Views

I am getting similar issue with https://yum.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB which expired.

Is this being worked on?

0 Kudos
yhsu
Beginner
13,172 Views

Hi, 

 

I'm having the similar issue. 

 

The following signatures were invalid: EXPKEYSIG ACFA9FC57E6C5DBE Intel(R) Software Development Products
#9 4.887 Hit:5 http://archive.ubuntu.com/ubuntu bionic-updates InRelease
#9 4.959 Hit:6 http://archive.ubuntu.com/ubuntu bionic-backports InRelease
#9 5.116 Reading package lists...
#9 6.006 W: GPG error: https://apt.repos.intel.com/mkl all InRelease: The following signatures were invalid: EXPKEYSIG ACFA9FC57E6C5DBE Intel(R) Software Development Products
#9 6.006 E: The repository 'https://apt.repos.intel.com/mkl all InRelease' is not signed.

 

 

Is there an estimate time when it will be fixed? Thanks! 

 

YH

 

yhsu
Beginner
11,766 Views
0 Kudos
Juhi_B_Intel
Moderator
13,126 Views

Thank you all for reporting the issue, We are working on fixing the issue for the MKL repo, will try to fix it by tomorrow.

If you are still facing issues with the oneapi or openvino repo then please try to update your keys with command like this

For oneAPI

wget -O- https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB \

| gpg --dearmor | sudo tee /usr/share/keyrings/oneapi-archive-keyring.gpg > /dev/null


For openVino

# download the key to system keyring

wget -O- https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB \

| gpg --dearmor | sudo tee /usr/share/keyrings/openvino-archive-keyring.gpg > /dev/null


Apt does not have a way to automatically grab the keys, as keyring is stored locally. So you will need to use above instructions to update your repo keys.. 



0 Kudos
apetroscy
Beginner
12,984 Views

This seems to have fixed my issue!

0 Kudos
alexyin1
Beginner
13,079 Views

Both the key in the documentation 

 

$ gpg --show-keys GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB
...
pub rsa2048 2019-09-30 [SC] [expired: 2023-09-30]
52ABD6E87E421793971873FFACFA9FC57E6C5DBE
uid Intel(R) Software Development Products

 

and the GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB above are expired as of 09-30, for the IPP and MKL libraries

 

$ gpg --show-keys GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB
pub rsa2048 2016-09-28 [SC] [expired: 2019-09-27]
BF4385F91CA5FC005AB39E1C1A8497B11911E097
uid "CN = Intel(R) Software Development Products", O=Intel Corporation

pub rsa2048 2019-09-30 [SC] [expired: 2023-09-30]
52ABD6E87E421793971873FFACFA9FC57E6C5DBE
uid Intel(R) Software Development Products

pub rsa2048 2019-07-26 [SC] [expired: 2023-07-26]
E1BA4ECEFB0656C61BF9794936B9569B3F1A1BC7
uid KEY-PIDT-PGP-20190726

pub rsa2048 2020-05-18 [SC] [expires: 2024-05-18]
6113D31362A0D280FC025AAB640736427872A220
uid CN=Intel(R) Software Development Products (PREPROD USE ONLY)

pub rsa2048 2023-08-21 [SC] [expires: 2027-08-21]
E9BF0AFC46D6E8B7DA5882F1BAC6F0C353D04109
uid CN=Intel(R) Software Development Products

 

Thank you for your time and please let me know where and when an active key may be found for the IPP and MKL libraries.

0 Kudos
Reply