Manage Signing Keys

JFrog Platform Administration Documentation

Content Type
Administration / Platform
ft:sourceType
Paligo

RSA key pairs are used to sign and verify the Alpine Linux index files in JFrog Artifactory, while GPG key pairs are used to sign and validate package integrity. The JFrog Platform enables you to manage multiple RSA and GPG signing keys through the Keys Management UI and REST API. The JFrog Platform supports managing multiple pairs of GPG signing keys to sign packages for authentication of several package types such as Debian, Opkg, and RPM through the Keys Management UI and REST API.

Note

Artifactory signs repository metadata (not packages) for RPM, Debian, Opkg, and Alpine.