Error(1514) : RPM is signed but failed to match with known keys

Products

• VMware Integrated OpenStack

Issue/Introduction

• Trying to use tdnf to update packages as directed by support and receive the following message:
  Error(1514) : RPM is signed but failed to match with known keys. Use --nogpgcheck to ignore.
• Both of these keys are not present on your system:
  $ rpm -qa | grep pub
gpg-pubkey-66fd4949-4803fe57
gpg-pubkey-8a6a826d-596882ca
  
  

 

Environment

7.x

Cause

This is caused by GPG key expiration in Photon 3.0.  Photon started using a newer 4096 bit gpg key for signing rpms on 28-Mar-2024.

Resolution

1. Check version of tdnf, if it is not version 3.x or above run the following:
   $ tdnf --version
$ tdnf update -y tdnf-3.1.0-1.ph3
2. Update photon-repos:
   $ tdnf update -y photon-repos-3.0-8.ph3 --refresh
Note:  You will be asked to import 2 keys, answer yes to both.
3. Once this is done, you can install rpms signed with the newer gpg key