GPG Check Failed When Downloading Packages from the CarbonBlack Repository

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

When gpg check is enabled for the CarbonBlack.repo, the files fail to install with this message: 

Error: GPG Check Failed

Environment

• Carbon Black EDR Server: 7.8.1 and Higher

Cause

GPG keys are not imported or the location is incorrect in the repo file. 

Resolution

Getting the GPG Keys:

1. Download the installation zip package. Authenticate to Packages Repository
2. Extract the two key files: cb.asc and public.asc

Option 1: Point the Repo to the Key Location

1. Open /etc/yum.repos.d/CarbonBlack.repo for editing.
2. Add these two lines to the repo, replacing directory with the location of the files. Note: file requires two forward slashes before the path, see the example in additional notes:

   gpgkey=file:///<path>/cb.asc
          file:///<path>/public.asc

3. Save the repo file. 

Option 2: Import the Keys into GPG

1. Import the keys using this command: 

   gpg --import cb.asc
   gpg --import public.asc

2. Validate the keys are listed: 

   gpg --list-keys

Additional Information

• gpgkey in CarbonBlack.repo example:

  gpgkey=file:///etc/cb/cb.asc
         file:///etc/cb/public.asc