Gandalf_The_Grey
Level 85
Thread author
Verified
Honorary Member
Top Poster
Content Creator
Well-known
- Apr 24, 2016
- 7,860
Offensive Security, the company that maintains Kali Linux, has some bad news for users. If you use Kali Linux, you might soon find that your system is unable to update its software.
The reason is that Offensive Security lost access to the signing key used for the Kali software repository. Linux systems rely on these cryptographic keys to verify the authenticity and integrity of packages before installing them. When the expected key is missing or incorrect, the package manager, apt, throws an error and refuses to proceed with updates.
The Kali team stated that the repository was frozen for a few days, but it is now being unfrozen, and updates are signed with a new key. This means pretty much everyone who tries to run apt update on an existing Kali installation will see an error message like this:
Err:1 Index of / kali-rolling InRelease
Sub-process /usr/bin/sqv returned an error code (1), error message is: Missing key 827C8569F2518CC677FECA1AED65462EC8D5E4C5, which is needed to verify signature.
So, what does a Kali user need to do? The Kali team says you need to manually download and install the new archive signing key.

Kali issues warning to users about update failures due to lost repository signing key
Kali Linux's maintainer, OffSec, has lost the repository signing key. This means updates will fail until you manually install the new key.
