&apt-docinfo;

apt-key

8 APT

apt-key

APT key management utility

          apt-key
          --keyring filename
          command
          arguments

## Description

`apt-key` is used to manage the list of keys used by apt to authenticate packages. Packages which have been authenticated using these keys will be considered trusted.

## Commands

add `filename`

- Add a new key to the list of trusted keys. The key is read from `filename`, or standard input if `filename` is `-`.

del `keyid`

- Remove a key from the list of trusted keys.

export `keyid`

- Output the key `keyid` to standard output.

exportall

- Output all trusted keys to standard output.

list

- List trusted keys.

finger

- List fingerprints of trusted keys.

adv

- Pass advanced options to gpg. With adv --recv-key you can download the public key.

update

- Update the local keyring with the keyring of Debian archive keys and removes from the keyring the archive keys which are no longer valid.

## Options

Note that options need to be defined before the commands described in the previous section.

--keyring `filename`

- With this option it is possible to specify a specific keyring file the command should operate on. The default is that a command is executed on the `trusted.gpg` file as well as on all parts in the `trusted.gpg.d` directory, through `trusted.gpg` is the primary keyring which means that e.g. new keys are added to this one.

## Files

&file-trustedgpg;

`/etc/apt/trustdb.gpg`

- Local trust database of archive keys.

`/usr/share/keyrings/debian-archive-keyring.gpg`

- Keyring of Debian archive trusted keys.

`/usr/share/keyrings/debian-archive-removed-keys.gpg`

- Keyring of Debian archive removed trusted keys.

## See Also

&apt-get;, &apt-secure;

&manbugs; &manauthor;