United States (change)

Shortcuts: Downloads | Fedora | Red Hat Network

Account Links: Cart | Register | Log In

Main Site Links:

• Home
• Solutions
• Services & Products
• Partners
• Developers
• Training
• Support
• Buy Online

Contacting Red Hat Securely

The Red Hat Security Response Team use a GNU Privacy Guard (GPG) key to secure communications. When contacting us at secalert@redhat.com you may encrypt your mail using this public key. We expect to change the key we use from time to time. Should we change the key, we will revoke previous keys and notify the enterprise-watch-list email list.

Please do not send messages encrypted with this public key to any address other than security@redhat.com or secalert@redhat.com. We are sorry but we are unable to accept orders or other non-security related email which is encrypted with this public key

RPM Package Signing

We use a number of GNU Privacy Guard (GPG) keys to sign our software packages. The necessary public keys are included in relevant products and are used automatically to verify software updates. You can also check the packages manually using the keys on this page.

To verify a RPM package for a Red Hat product, run the command

rpm --checksig -v <filename>.rpm

The output of this command will show you if the package is signed, and which key was used to sign it.

Please do not send messages encrypted with these public keys, for all secure communications please see the section "Contacting Red Hat Securely"

Release Package Signing

Beta Package Signing