Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm using the HP SDR system (MCP specifically) for Linux packages to manage the HP hardware RAID, iLo, etc. The kernel drivers for the hardware are upstream, so these are just management utilities.

deb precise current/non-free

Per the FAQ, you can add an apt key so the repo isn't from an unsigned source.

wget -O - | sudo apt-key add -
apt-key list
pub   1024D/437D05B5 2004-09-12
uid                  Ubuntu Archive Automatic Signing Key <>
sub   2048g/79164387 2004-09-12

pub   1024D/FBB75451 2004-12-30
uid                  Ubuntu CD Image Automatic Signing Key <>

pub   4096R/C0B21F32 2012-05-11
uid                  Ubuntu Archive Automatic Signing Key (2012) <>

pub   4096R/EFE21092 2012-05-11
uid                  Ubuntu CD Image Automatic Signing Key (2012) <>

pub   1024D/2689B887 2005-03-11 [expires: 2015-03-09]
uid                  Hewlett-Packard Company (HP Codesigning Service)
sub   2048g/57E5E96D 2005-03-11 [expires: 2015-03-09]
sudo apt-get install hponcfg
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following NEW packages will be installed:
0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 0 B/44.0 kB of archives.
After this operation, 164 kB of additional disk space will be used.
WARNING: The following packages cannot be authenticated!
Install these packages without verification [y/N]?

Of course, I can override with -y, but I don't understand why it is saying that the packages can't be authenticated when I've added the proper repo GPG key to my keychain.

Can anyone explain this or how to fix it without telling apt to do something unwise every time?

I noticed that there is no /var/lib/apt/lists/ Release or Release.gpg entry on my system, but they exist in the repo. Perhaps this is the source of the problem?

share|improve this question
up vote 1 down vote accepted

Solution: I am a numbskull and should have used the script provided by HP. I was converting my deb line from an old format provided by their legacy SDR system and failed to notice some format changes. The correct format for the deb line is:

deb precise/current non-free

If you use the incorrect version posted above, your Packages will download, but the Release file and corresponding gpg will not.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.