The GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB expired

[XuRoland]

I got this error when doing apt-get update.

W: GPG error: https://apt.repos.intel.com/oneapi all InRelease: The following signatures were invalid: EXPKEYSIG ACFA9FC57E6C5DBE Intel(R) Software Development Products

Check this file

https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB

I find it just expired

pub   rsa2048 2016-09-28 [SC] [expired: 2019-09-27]
      BF4385F91CA5FC005AB39E1C1A8497B11911E097
uid           "CN = Intel(R) Software Development Products", O=Intel Corporation
pub   rsa2048 2019-09-30 [SC] [expired: 2023-09-30]
      52ABD6E87E421793971873FFACFA9FC57E6C5DBE
uid           Intel(R) Software Development Products
pub   rsa2048 2019-07-26 [SC] [expired: 2023-07-26]
      E1BA4ECEFB0656C61BF9794936B9569B3F1A1BC7
uid           KEY-PIDT-PGP-20190726
pub   rsa2048 2020-05-18 [SC] [expires: 2024-05-18]
      6113D31362A0D280FC025AAB640736427872A220
uid           CN=Intel(R) Software Development Products (PREPROD USE ONLY)

[Buddhika_C_]

I have the same goes like this :
Hit:6 https://apt.repos.intel.com/oneapi all InRelease
Err:6 https://apt.repos.intel.com/oneapi all InRelease
The following signatures were invalid: EXPKEYSIG ACFA9FC57E6C5DBE Intel(R) Software Development Products
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
4 packages can be upgraded. Run 'apt list --upgradable' to see them.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://apt.repos.intel.com/oneapi all InRelease: The following signatures were invalid: EXPKEYSIG ACFA9FC57E6C5DBE Intel(R) Software Development Products
W: Failed to fetch https://apt.repos.intel.com/oneapi/dists/all/InRelease The following signatures were invalid: EXPKEYSIG ACFA9FC57E6C5DBE Intel(R) Software Development Products
W: Some index files failed to download. They have been ignored, or old ones used instead.

I followed the link :-
Download the Intel® oneAPI Base Toolkit

[apetroscy]

Same problem here:

W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://apt.repos.intel.com/oneapi all InRelease: The following signatures were invalid: EXPKEYSIG ACFA9FC57E6C5DBE Intel(R) Software Development Products
W: Failed to fetch https://apt.repos.intel.com/oneapi/dists/all/InRelease  The following signatures were invalid: EXPKEYSIG ACFA9FC57E6C5DBE Intel(R) Software Development Products
W: Some index files failed to download. They have been ignored, or old ones used instead.

Any solutions?

[darldil]

Hello,

It seems that it is still not working.
Any estimate of when the signature will be updated?

Br.

[Ying_S_Intel]

We are sorry for this inconvenience you've experienced.  The root of the problem was an internal issue, which has now been resolved.
Please follow the steps provided below and let us know if it is fixed:

Please run three commands:
1.  wget https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB

2. sudo apt-key add GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB

3. sudo apt update

Hope it helps. 

Thanks,
Ying S
Intel oneAPI Tools Product Team

[Surbhi]

Hi @Ying_S_Intel 

I have updated this key but still getting error with openvino when doing apt-get update:

W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://apt.repos.intel.com/openvino/2021 all InRelease: The following signatures were invalid: EXPKEYSIG ACFA9FC57E6C5DBE Intel(R) Software Development Products
W: Failed to fetch https://apt.repos.intel.com/openvino/2021/dists/all/InRelease  The following signatures were invalid: EXPKEYSIG ACFA9FC57E6C5DBE Intel(R) Software Development Products

Do you have any solution for this?

Thanks,
Surbhi.

[Juhi_B_Intel]

Surbhi, This issue has been fixed, please try again with the following instructions.

# download the key to system keyring

wget -O- https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB \

| gpg --dearmor | sudo tee /usr/share/keyrings/openvino-archive-keyring.gpg > /dev/null

# add signed entry to apt sources and configure the APT client to use Intel repository:

echo "deb [signed-by=/usr/share/keyrings/openvino-archive-keyring.gpg] https://apt.repos.intel.com/openvino/2021 all main" | sudo tee /etc/apt/sources.list.d/intel-openvino-2021.list

[Surbhi]

Thanks @Juhi_B_Intel. Followed these steps and it is working now.

[leee]

Hey Juhi,

I still see the following error when trying your post solution :
Hit:2 https://storage.googleapis.com/bazel-apt stable InRelease
Get:3 https://apt.repos.intel.com/mkl all InRelease [4438 B]
Err:3 https://apt.repos.intel.com/mkl all InRelease
The following signatures were invalid: EXPKEYSIG ACFA9FC57E6C5DBE Intel(R) Software Development Products
Hit:4 http://security.ubuntu.com/ubuntu focal-security InRelease
Hit:5 http://archive.ubuntu.com/ubuntu focal InRelease
Hit:6 http://archive.ubuntu.com/ubuntu focal-updates InRelease
Hit:7 http://archive.ubuntu.com/ubuntu focal-backports InRelease
Reading package lists... Done
W: GPG error: https://apt.repos.intel.com/mkl all InRelease: The following signatures were invalid: EXPKEYSIG ACFA9FC57E6C5DBE Intel(R) Software Development Products
E: The repository 'https://apt.repos.intel.com/mkl all InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

Can you help confirm? Thanks~

[Jordan_Heemskerk]

Hello, 

I can confirm that the new public GPG keys are available, but it appears the MKL repo still needs to be re-signed with the new key.

W: GPG error: https://apt.repos.intel.com/mkl all InRelease: The following signatures were invalid: EXPKEYSIG ACFA9FC57E6C5DBE Intel(R) Software Development Products

E: The repository 'https://apt.repos.intel.com/mkl all InRelease' is not signed.

Is there any ETA on when this will be done?

Thanks,

Jordan

[apetroscy]

I still have the same issue:

W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://apt.repos.intel.com/openvino/2021 all InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY BAC6F0C353D04109
W: GPG error: https://apt.repos.intel.com/oneapi all InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY BAC6F0C353D04109
E: The repository 'https://apt.repos.intel.com/oneapi all InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

[jseiler]

Hello,

We are also experiencing the same issue as @Jordan_Heemskerk is facing. 
It seems that the package is not signed with the key that is available at: 

https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB

Here's the output that we're seeing:

#13 5.934 Get:6 https://apt.repos.intel.com/mkl all InRelease [4438 B]                              
#13 6.023 Err:6 https://apt.repos.intel.com/mkl all InRelease                                       
#13 6.023   The following signatures were invalid: EXPKEYSIG ACFA9FC57E6C5DBE Intel(R) Software Development Products                                                                                    
#13 6.026 Reading package lists...                                                                  
#13 6.883 W: GPG error: https://apt.repos.intel.com/mkl all InRelease: The following signatures were
 invalid: EXPKEYSIG ACFA9FC57E6C5DBE Intel(R) Software Development Products                         
#13 6.883 E: The repository 'https://apt.repos.intel.com/mkl all InRelease' is not signed.   

Is there an ETA on this?


Thanks,

Joseph 

[jseiler]

Seems to be working again.

Thanks @Juhi_B_Intel 

[joonash]

Now it works.

[darldil]

Hello,

Some repositories are still not working.
In the https://apt.repos.intel.com/oneapi all InRelease repository the new key is working. But in the https://apt.repos.intel.com/mkl all InRelease repository it still doesn't work.

Is there any estimate when it will be fixed for all repositories?

Br.

[Doron]

I am getting similar issue with https://yum.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB which expired.

Is this being worked on?

[yhsu]

Hi, 

I'm having the similar issue. 

The following signatures were invalid: EXPKEYSIG ACFA9FC57E6C5DBE Intel(R) Software Development Products
#9 4.887 Hit:5 http://archive.ubuntu.com/ubuntu bionic-updates InRelease
#9 4.959 Hit:6 http://archive.ubuntu.com/ubuntu bionic-backports InRelease
#9 5.116 Reading package lists...
#9 6.006 W: GPG error: https://apt.repos.intel.com/mkl all InRelease: The following signatures were invalid: EXPKEYSIG ACFA9FC57E6C5DBE Intel(R) Software Development Products
#9 6.006 E: The repository 'https://apt.repos.intel.com/mkl all InRelease' is not signed.

Is there an estimate time when it will be fixed? Thanks! 

YH

[yhsu]

It works, thanks!

[Juhi_B_Intel]

Thank you all for reporting the issue, We are working on fixing the issue for the MKL repo, will try to fix it by tomorrow.

If you are still facing issues with the oneapi or openvino repo then please try to update your keys with command like this

For oneAPI

wget -O- https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB \

| gpg --dearmor | sudo tee /usr/share/keyrings/oneapi-archive-keyring.gpg > /dev/null

For openVino

# download the key to system keyring

wget -O- https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB \

| gpg --dearmor | sudo tee /usr/share/keyrings/openvino-archive-keyring.gpg > /dev/null

Apt does not have a way to automatically grab the keys, as keyring is stored locally. So you will need to use above instructions to update your repo keys.. 

[apetroscy]

This seems to have fixed my issue!

[alexyin1]

Both the key in the documentation 

$ gpg --show-keys GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB
...
pub rsa2048 2019-09-30 [SC] [expired: 2023-09-30]
52ABD6E87E421793971873FFACFA9FC57E6C5DBE
uid Intel(R) Software Development Products

and the GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB above are expired as of 09-30, for the IPP and MKL libraries

$ gpg --show-keys GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB
pub rsa2048 2016-09-28 [SC] [expired: 2019-09-27]
BF4385F91CA5FC005AB39E1C1A8497B11911E097
uid "CN = Intel(R) Software Development Products", O=Intel Corporation

pub rsa2048 2019-09-30 [SC] [expired: 2023-09-30]
52ABD6E87E421793971873FFACFA9FC57E6C5DBE
uid Intel(R) Software Development Products

pub rsa2048 2019-07-26 [SC] [expired: 2023-07-26]
E1BA4ECEFB0656C61BF9794936B9569B3F1A1BC7
uid KEY-PIDT-PGP-20190726

pub rsa2048 2020-05-18 [SC] [expires: 2024-05-18]
6113D31362A0D280FC025AAB640736427872A220
uid CN=Intel(R) Software Development Products (PREPROD USE ONLY)

pub rsa2048 2023-08-21 [SC] [expires: 2027-08-21]
E9BF0AFC46D6E8B7DA5882F1BAC6F0C353D04109
uid CN=Intel(R) Software Development Products

Thank you for your time and please let me know where and when an active key may be found for the IPP and MKL libraries.