Verifying the RPM Package Signatures

All RPM packages on the Novell ZENworks 7 Linux Management CD are signed by Novell. To ensure that the RPM packages have not been tampered with, you can verify the RPM package signatures.

1. At a Linux machine, mount the Novell ZENworks 7 Linux Management CD using the following command:.

   mount device mountpoint

   For example:

   mount /dev/cdrom /zlm7

   If you are using an ISO image rather than a physical CD, copy the ISO to a temporary folder on the Linux machine, then mount the image using the following command:
   
   mount -o loop /tempfolderpath/isoimagename.iso mountpoint

   Replace tempfolderpath with the path to the temporary folder and replace mountpoint with the path to the file system location you want to mount the image. The path specified by mountpoint must already exist.

   For example:

   mount -o loop /zlm7/ZEN7_LinuxMgmt.iso /zlm7/install

2. At the command line, change to the mountpoint.

3. Import the public key using the following command:

   rpm --import ./zlm7-publickey

4. Verify the RPM packages using the following command:

   rpm -K RPM_file

   For example:

   rpm -K mount_point/data/packages/zlm-7-runtime/zles-9-i586/novell-zenworks-server-7.0.0-1.i4=586.rpm

   Rather than verifying packages individually, you can use the following script to verify all of the RPM packages on the Novell ZENworks 7 Linux Management CD:

   for i in 'find mount_point/data/packages -name *.rpm' ; 
   do rpm -K $i ; 
   done