Verifying the signature of RPM packages included with SEP 14.2 MP1 and later.

Products

• Endpoint Protection

Issue/Introduction

Starting with Symantec Endpoint Protection (SEP) 14.2 MP1, the RPM packages included with the Linux client are now digitally signed. This document contains instructions to verify the digital signature of these RPM packages during installation of the product.

Resolution

• Download the SEPFL GPG Public Key attached to this document and extract the contents to a directory on the Linux system where the installation will be performed.
• Use the following command to import the signature:

sudo rpm --import /path/to/SYMANTEC-RPM-GPG-Key

Where /path/to/SYMANTEC-RPM-GPG-Key is the path to the GPG signature file on the system.

•  When installing the SEP client using the install script, invoke it with the -checksig option. Example:

sudo ./install.sh -i -checksig