repomd.xml not digitally signed by ZCM when using yum-repos

  • 7010012
  • 16-Jan-2012
  • 18-Jul-2013

Environment

Novell ZENworks 11 Configuration Management Support Pack 1 - ZCM 11 SP1 Bundles
SUSE Linux Enterprise Server 11 Service Pack 1

Situation

A subscription in ZCM is available as a yum-repository.

When adding the repository with YaST, the following 3 popups will appear:
    Error
    Download failed:
    File '/repodate/repomd.xml.asc' not found on medium 'http://update-server/repo-name'

    Error
    Download failed:
    File '/repodata/repomd.xml.key' not found on medium 'http://update-server/repo-name'

    Unsigned
    The file repomd.xml from repository
    http:http://update-server/repo-name/
    is not digitally signed. This means that the origin and integrity of the file
    cannot be verified. Using the file may put the integrity of your system at risk.
    Use it anyway?

When adding the repository with zypper, on the first action (e.g. 'zypper lu' or 'zypper up') the following question will appear:
File 'repomd.xml' from repository 'reponame' is unsigned, continue? [yes/no] (no):

Resolution

Status

Reported to Engineering