Skip to main content
Version: ⭐ 25.10

Rotating keys

For security reasons, the keys used to sign Centreon RPMs or the Debian repository must be rotated occasionally.

Fresh installation​

If you performed a fresh installation after the new RPM key was published, no additional actions are necessary, apart from accepting the new rpm key.

Retrieving key from https://yum-gpg.centreon.com/RPM-GPG-KEY-CES
Importing GPG key 0xFAA09FEB:
Userid     : "Centreon RPM 2025 2027 <technique+gpg@centreon.com>"
Fingerprint: 41fb bebf aeaf 6d07 2267 540a 0b08 79fe faa0 9feb
From       : https://yum-gpg.centreon.com/RPM-GPG-KEY-CES
Is this ok [y/N]:

However, you can check that you have the correct key.

Existing installation​

If you performed a fresh installation of a Centreon platform before the new RPM key was published, the existing key must be replaced with the new one.

  1. Download the following script:

    curl -JLO https://raw.githubusercontent.com/centreon/centreon/refs/heads/develop/centreon/check-centreon-gpg-key.sh

  2. Make the script executable:

    chmod u+x check-centreon-gpg-key.sh

  3. Run the script:

    sh check-centreon-gpg-key.sh

    The script will:

    • check the RPM key in the RPM database and ask you to remove it
    • check the key file in the /etc/pki/rpm-gpg directory
    • ask you to fetch and import the new RPM key into the RPM database
    • ask you to update the release RPM package (this will remove the revoked key from /etc/pki/rpm-gpg)
    • ask you to check the signature of the RPM packages.

Checks​

You can then check that the new key has been correctly imported. For the new key published on December 2, 2025:

  • After installation, check if the new key has been correctly imported into the RPM database:

    rpm -qi gpg-pubkey-faa09feb-692eaf2a

    The results should be as follows:

    Name        : gpg-pubkey
    Version     : faa09feb
    Release     : 692eaf2a
    Architecture: (none)
    Install Date: Tue 02 Dec 2025 12:52:18 PM GMT
    Group       : Public Keys
    Size        : 0
    License     : pubkey
    Signature   : (none)
    Source RPM  : (none)
    Build Date  : Tue 02 Dec 2025 09:19:38 AM GMT
    Build Host  : localhost
    Relocations : (not relocatable)
    Packager    : Centreon RPM 2025 2027 (Centreon RPM 2025 2027) <technique+gpg@centreon.com>
    Summary     : gpg(Centreon RPM 2025 2027 (Centreon RPM 2025 2027) <technique+gpg@centreon.com>)
    Description :
    -----BEGIN PGP PUBLIC KEY BLOCK-----
    Version: rpm-4.14.3 (NSS-3)

    mQINBGkuryoBEACdOXSCHtYgg+4xyZhGTjLy6TtktkuRhD9PN//DOTraYfAYBTGd
    TXBB4GQ011Ih/8fQuUz736D+HqGLFpR55ilWPgqA0cg3L+BYGpjiH2PWdH45sMHs
    ZJ2vqaCggy/kV3MAzQtozSJEVm95H5H4+nOqRizLWgElySb5s5dRioEAHrbYJarb
    4MwW7Y9WyzXr+MrSRvPguerXUjbgX+buXNlnyp+cjYTPcsDFQOFY+7vzb7v5rpOE
    zCpzCyQlzAK5Eid6tdLI8KO5cPWBqOQy5kdqEYhaZAxUCOCEPxB56/YPwYc/z1Gn
    K5HpxLN602HXmFgFoSpKPo2AGZTUjOmDTwU+hvTMzIpp89tpodLwTZxU/hvXa3tL
    mytQhdtu0iVUX6oahvdfqRr5L6EDmUfxa7+yywXGsWGNdV//Dnq+/1uHiz6hRPhy
    V7WBH8ZzslDrIR/V3REbw7yq/SBIfKBC05MfC+8P15WeVbIhv368AFw6HHQtTbpk
    vYEK2abJnqYHvo9oIHEkdkAV9EnqQ0i3aqG53hfAaO98mq9BNGI25yOtHVDdTa6L
    zY7ilVPJlleGEN55+Wmu3KiWZNeCjCmbqAUYhAELXDEhYbg1ktJ5sITo0FHR8nuL
    vq5gEbM2dva575R1b/kELYx8PY6nNCEmuvEb5RMLSTfyTVQStvz90D9arwARAQAB
    tExDZW50cmVvbiBSUE0gMjAyNSAyMDI3IChDZW50cmVvbiBSUE0gMjAyNSAyMDI3
    KSA8dGVjaG5pcXVlK2dwZ0BjZW50cmVvbi5jb20+iQJUBBMBCgA+FiEEQfu+v66v
    bQciZ1QKCwh5/vqgn+sFAmkuryoCGwMFCQPCZwAFCwkIBwIGFQoJCAsCBBYCAwEC
    HgECF4AACgkQCwh5/vqgn+v+4Q//TIUj9CJl67qZjLSSpACbZ5Kfk25l7zPen7FH
    OuXtBfRLbeWOWn1nmO/8Na2xj6mmQV78vAWHxoQtlTPWTEkENFCd3VucEg13lPrJ
    vefBxIgqQtG61IFfLF/FAGwf/Ds5O2wBdd/aAT9shWqTKSsTNJToiQBtC7KPyThF
    2F9FkyO87t1x/i0yelE4DkDK95ymhxmTg9tJNn/xRGLcQ0GxtW/0Zz6VOxrWMvd9
    KnP4n4boxmxdLdOagsmgK0y5ct0FLYXu55k7O5SIrY1AFTvR3r5AZrwZ9PQNz6yN
    urCwg8Yz+Ho3qj2uVC83A68ViFAhq3LuROR7cqYQbjp+re1bYxULV75A1cX3zl90
    lYJC+EcZFc4pU8PGE5MP1R/CkB20cTX0xv4Ym4U6bi9qIm8id+gGZRbCpHRKcnvj
    mMoJaC+EQZWPXCLc/4/xew7LuWGd3M08Ascldc5cR/iHutwQS0cLgAAeBGJlmjYp
    Q7dPfxl+5LaR4jxy7afTkiESdUJ1M+an52i/euLPsxBKy1IK/QZhU97YwG69oxwT
    RF6kwV/Sg4xtdrjGN9QXxMUpiHBqyhwKs3nPmQopU8upaBFJ9I25bAOXS/ITXlkp
    ga9OCADM5OpnYClbmRsDKaSr6rTSYFJOQXM+aVjoXkRcQn1kSS1aWPlelrYtlQRu
    hUU/dIm5Ag0EaS6vKgEQALwaSsO+dL/ksrDl9fX+NzeffISVKeoZ/OZJCarnNwIt
    iR4TOaIYT1sA70sxxkDC1D86GgJvtjvkplATENYJU5mpfblykEySenKG2HD70qbT
    XdySrKKPXvjjk17wXGbu27PMXlfLRywMhofJOM9WSaVycoDeg1pGxjYqXZx5Jk78
    iEReoz+VjDAj9AI2RfoMIP4Ve0f5j1bpC1FcbFryMhI1oaO1gfJLWtCa+Mh2KLsa
    Ky5RYNYdl2cjmOd4k4f02mBByBnNEzCPlPZNPhvfLYbmnalom+yukvHfMWtlwIlD
    Fj6vFfAL+tgTGGM8CKTkHowXMm4uPX+BrYUd5cUmr8wnPRw8sEiIGt4szceusyE6
    FKuWKLBGHejdyri9SZZcJF2I9rKEpo4Lx/1sFzSnWUiHuMhUhznbGOC80+qGfECL
    uYPeGwogaWo5Rc3WqpR7G2e/CK4CWyOur2T2nxeCbZCwhm1MjwNyF2XX/rbvdp6O
    BmXp/e9yU88mUgCQ7mmjMOC75oAvS/eloH7srjcrivdnuA0fJpYFwkbV7PoeaV+V
    RkK3W+lopqjGN/XnXaQ5mKIaAK4TNEroWThvVPIWYCLtccTJQA6sT5X4m2QtubHk
    oAy2u5XRvvImSG88LUWvHQondNEJUU7CVG+P1hy8wpKfQXjIq+As6z53+aXSyhwt
    ABEBAAGJAjwEGAEKACYWIQRB+76/rq9tByJnVAoLCHn++qCf6wUCaS6vKgIbDAUJ
    A8JnAAAKCRALCHn++qCf60/tD/4p2ilIar8aEdwEiN+tRi9w8ACE6bMV8XNT/kuL
    1u5RG6eqPJtdJB9kOhftWOBRnVA5E3Cu/SLY7YI4hqJ2/yPbUA0kLH7eSbTwdDX5
    sjp6Ibci4hvdpwySVpsb18jREku1fI9N6GO0TOTwbpSDjOoX9JFgkvhcqqyOIGXM
    ZtSFuJqjcUU3henHBPZ7Yg163AMgy2VrfEwC3f8iOPahivDod7hf74LG6zGXteta
    ErG/IAp8Lc58fMqD3h+mKbZ6dDa8SkfR7i619kur9BeZWWaYqSNKCKEs3UUdAafK
    3VTskdyEdmgUBbsZpnRI4ZNkLqJ968ou3nrpK7/dkqLkOeDAG7NySSkHNKYVMjXy
    0XneZojP7RYwY5tt8f30JThdxWprTAzGd9jHYWH2jc6K3FzkRfvCz8WIYJVhhAPo
    DcvL10L2nx1A1gQ4IMlS8UaQ/zg8QJouPnkzfXdqoJqX2CBxNlQcdwe3CZNKWbok
    +8QANhr9FP29Ms3mNJ4tzcSk95DeEsU6jEGwUN52SgSaoZtRmfQKfkD+F0JwYwPa
    s/KgpDa4dIxU7pQv3jRneSSVQVbLizKyOOcIGZZNftp1fetA0xa2H0wZjpHeUNBe
    dwwBmB/t8WU9J8iT3+AvDvexbwO0uYa0FynZsSjaiet3b4r8GW4uHfbCEZYErLdN
    kHPSiA==
    =1bjv
    -----END PGP PUBLIC KEY BLOCK-----

  • Check that the only Centreon key in the RPM database is this one: gpg-pubkey-faa09feb-692eaf2a:

    rpm -q gpg-pubkey --qf '%{NAME}-%{VERSION}-%{RELEASE}\t%{SUMMARY}\n'

    The results should be as follows:

    gpg-pubkey-b86b3716-61e69f29	AlmaLinux OS 9 <packager@almalinux.org> public key
    gpg-pubkey-faa09feb-692eaf2a	Centreon RPM 2025 2027 <technique+gpg@centreon.com> public key

List of keys​

OSFingerprintValidity
Alma/RHEL/Oracle Linux41FB BEBF AEAF 6D07 2267 540A 0B08 79FE FAA0 9FEBValid from December 2, 2025 to December 2, 2027
Alma/RHEL/Oracle Linux1035 E42C B766 7952 EE42 DEE9 A97D AA5A 3FC4 9C1BRevoked December 1, 2025
Alma/RHEL/Oracle Linux0E52 401B 40F6 044F 928C 0B7B F6FC 4AE3 8A76 52BCRevoked October 14, 2021
DebianC903 FA90 C5EC 3C69 C922 9203 0395 7625 73E5 0BC4Valid from April 12, 2024
Debian1441 882B ED29 D70C F2E8 74D6 5E9C 3745 59B6 C02ERevoked April 11, 2024