# Artifact-verify-key.pem missing
**URL:** https://hub.mender.io/t/artifact-verify-key-pem-missing/6742
**Category:** Yocto Project
**Tags:** kirkstone
**Created:** [April 18, 2024, 9:02am UTC](https://hub.mender.io/t/artifact-verify-key-pem-missing/6742 "2024-04-18T09:02:39Z")
**Posts on this page:** 6
**Page:** 1
### Author:  [@hesmar](https://hub.mender.io/u/hesmar)
#### Post date: [April 18, 2024, 9:02am UTC](https://hub.mender.io/t/artifact-verify-key-pem-missing/6742/1 "2024-04-18T09:02:39Z")
Hi,
I wanted to migrate from Mender 3.5 to 4.0 on kirkstone and noticed that the artifact verify key was not installed to `/etc/mender`. I think the reason is that the file is not assigned to the new `mender-update` package. Instead, bitbake creates a new package `mender` which gets not installed into the rootfs. I solved this by assigning the file to the `mender-update` package manually in the `mender_%.bbappend`:
```auto
FILESEXTRAPATHS:prepend := "${THISDIR}/files:"
SRC_URI:append = " file://artifact-verify-key.pem"
FILES:mender-update += "${sysconfdir}/mender/artifact-verify-key.pem"
```
I think this should be either fixed or documented.
---
### Author:  [@TheYoctoJester](https://hub.mender.io/u/TheYoctoJester)
#### Post date: [April 18, 2024, 12:39pm UTC](https://hub.mender.io/t/artifact-verify-key-pem-missing/6742/2 "2024-04-18T12:39:56Z")
Hi @hesmar,
Thanks a lot for bringing it up. Can you file a ticket on Jira? So you’ll get immediately notified on the progress 🙂
Greets,
Josef
---
### Author:  [@hesmar](https://hub.mender.io/u/hesmar)
#### Post date: [April 18, 2024, 1:08pm UTC](https://hub.mender.io/t/artifact-verify-key-pem-missing/6742/3 "2024-04-18T13:08:51Z")
Hi @TheYoctoJester,
not sure how to do that. It seems that I am not allowed to create issues as guest. So I tried to join the team, was that correct?
---
### Author:  [@hesmar](https://hub.mender.io/u/hesmar)
#### Post date: [April 18, 2024, 1:20pm UTC](https://hub.mender.io/t/artifact-verify-key-pem-missing/6742/4 "2024-04-18T13:20:07Z")
Ok thanks, I was able to create the ticket now. The issue is tracked [here](https://northerntech.atlassian.net/browse/MEN-7204).
---
### Author:  [@sschefter](https://hub.mender.io/u/sschefter)
#### Post date: [October 2, 2024, 2:08pm UTC](https://hub.mender.io/t/artifact-verify-key-pem-missing/6742/5 "2024-10-02T14:08:27Z")
Note that only the FILES:mender-update part should be implemented in the fix. If you are using the MENDER\_ARTIFACT\_VERIFY\_KEY variable to specify the key file, you won’t want the FILESEXTRAPATHS:prepend or SRC\_URI:append lines. And the need to have those lines in a bbappend file are documented in [Building for production | Mender documentation](https://docs.mender.io/operating-system-updates-yocto-project/build-for-production#artifact-signing-and-verification-keys)
---
### Author:  [@TheYoctoJester](https://hub.mender.io/u/TheYoctoJester)
#### Post date: [November 24, 2024, 7:27pm UTC](https://hub.mender.io/t/artifact-verify-key-pem-missing/6742/6 "2024-11-24T19:27:17Z")
Hi @hesmar and @sschefter,
This flew under the radar way too long ☹ But the fix was just merged: [Merge pull request #2207 from TheYoctoJester/fix\_verification\_key\_pac… · mendersoftware/meta-mender@c3cb005 · GitHub](https://github.com/mendersoftware/meta-mender/commit/c3cb0050296fdc7dbf7aecac32b78da1b3c8fa4d)
Greetz,
Josef