SEP will not run on RHEL 9, warning: Signature not supported. Hash algorithm SHA1 not available.

Products

• Endpoint Security Complete

Issue/Introduction

SEP is installed on RHEL 9. However the sisevt and sisap components show as 'not loaded'.

This error appears when importing the key:  Signature not supported. Hash algorithm SHA1 not available.

Environment

RHEL 9

Cause

Our signing GPG key uses the SHA1 format, which has been deprecated in RHEL 9. We do not yet have a SHA256 GPG key used for signing our packages.

Resolution

Temporarily allow SHA1 keys to be imported:

update-crypto-policies --set DEFAULT:SHA1

Then import the key as per Verifying the signature of rpm/dev packages for SEP Linux client 14.2 MP1 and later.

Then install SEP.

Then if you need to disable SHA1 GPG keys again:

update-crypto-policies --set DEFAULT

 

Additional Information

You would need to re-enable SHA1 GPG keys again as above any time you need to update the packages or upgrade SEP, at least until we start using a SHA256 GPG key.