Stanley Allely said: [snip] > Does the default up2date verify the signatures... [snip] Yes. # grep -i gpg /etc/sysconfig/rhn/up2date useGPG[comment]=Use GPG to verify package integrity useGPG=1 gpgKeyRing[comment]=The location of the gpg keyring to use for package checking gpgKeyRing=/etc/sysconfig/rhn/up2date-keyring.gpg -- William Hooper