The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Verify the signature on RPM-based systems

Prev Next

Before installing the software, verify the software authenticity by validating the signature.

  1. Log on to the system as a user with administrator rights.

  2. Locate the public key (GPG) from the software download site.

  3. Import your public key to your RPM DB using this command.

    rpm --import <Public_Key_Name>

    If you don't import the public key using this command, you will get the following warning message during the installation.

    /tmp/tmp.FdcQqEpF3i/McAfeeFW-<vesion_number>-<build_number>.x86_64.rpm: Header V4 RSA/SHA1 Signature, key ID <key_number>: NOKEY

  4. Verify the signature.

    rpm -K McAfeeESP-<version_number>-<build_number>_x86_64.rpm

    rpm -K McAfeeRt-<version_number>-<build_number>_x86_64.rpm

    rpm -K McAfeeFW-<version_number>-<build_number>_x86_64.rpm

    You get a message similar to McAfeeESP-<version_number>-<build_number>.x86_64.rpm: rsa sha1 (md5) pgp md5 OK