Rotating the GPG Key

NVIDIA constantly evaluates and improves security implementations. As part of these improvements, we are rolling out changes to harden the security and reliability of our repositories. These changes require rotating the GPG keys that are used to sign the packages and metadata in those repositories. This section provides information about how to rotate the GPG keys on your system.

1. Directly install the nvidia-repo-setup package:

   $ sudo dnf install -y https://repo.download.nvidia.com/baseos/el/el-files/8/nvidia-repo-setup-21.06-1.el8.x86_64.rpm
   

2. Manually revoke the previous DGX and CUDA GPG keys.

   $ sudo rpm -e gpg-pubkey-629c85f2-57571711
   $ sudo rpm -e gpg-pubkey-7fa2af80-576db785
   

3. Clean up old repository metadata.

   $ sudo dnf clean metadata
   

OTA updates can now occur as normal.