Rotating the GPG Key

NVIDIA constantly evaluates and improves security implementations. As part of these improvements, we are rolling out changes to harden the security and reliability of our repositories. These changes require rotating the GPG keys that are used to sign the packages and metadata in those repositories. This section provides information about how to rotate the GPG keys on your system.

1. Directly install the nvidia-repo-setup package:

   Copy

   Copied!

               
   
               
   $ sudo dnf install -y https://repo.download.nvidia.com/baseos/el/el-files/8/nvidia-repo-setup-21.06-1.el8.x86_64.rpm
           

2. Manually revoke the previous DGX and CUDA GPG keys.

   Copy

   Copied!

               
   
               
   $ sudo rpm -e gpg-pubkey-629c85f2-57571711
   $ sudo rpm -e gpg-pubkey-7fa2af80-576db785
           

3. Clean up old repository metadata.

   Copy

   Copied!

               
   
               
   $ sudo dnf clean metadata
           

OTA updates can now occur as normal.