# Downloads.mender.io access denied error **URL:** \ **Category:** General Discussions\ **Created:** [November 14, 2022, 9:18am UTC](https://hub.mender.io/t/downloads-mender-io-access-denied-error/5398 "2022-11-14T09:18:29Z")\ **Posts on this page:** 12\ **Page:** 1
**Author:** ![danielbisar](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/danielbisar/32/1787_2.png) [@danielbisar](https://hub.mender.io/u/danielbisar)\ **Post date:** [November 14, 2022, 9:18am UTC](https://hub.mender.io/t/downloads-mender-io-access-denied-error/5398/1 "2022-11-14T09:18:29Z")
It is kind of critical and I am not sure if this is the right place to ask. Accessing [https://downloads.mender.io/repos/debian/](https://downloads.mender.io/repos/debian/) is currently not possible (access denied error) and when trying to access the repo with the previously always working GPG key I get now the error that the repo is not signed. Can anyone help me out? ---
**Author:** ![robgio](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/robgio/32/1760_2.png) [@robgio](https://hub.mender.io/u/robgio)\ **Post date:** [November 14, 2022, 11:30am UTC](https://hub.mender.io/t/downloads-mender-io-access-denied-error/5398/2 "2022-11-14T11:30:41Z")
Hi @danielbisar yes, the old gpg key recently expired. You can renew it in the same way you installed the old one: ```auto curl -fsSL https://downloads.mender.io/repos/debian/gpg | sudo tee /etc/apt/trusted.gpg.d/mender.asc ``` You can then verify it with: ```auto gpg --show-keys --with-fingerprint /etc/apt/trusted.gpg.d/mender.asc ``` reference: [Downloads | Mender documentation](https://docs.mender.io/downloads) About the [https://downloads.mender.io/repos/debian](https://downloads.mender.io/repos/debian) access, it’s expected that you cannot browse it, but still, it’s accessible by the package managers. Thanks Roberto ---
**Author:** ![Dave](https://avatars.discourse-cdn.com/v4/letter/d/ee7513/32.png) [@Dave](https://hub.mender.io/u/Dave)\ **Post date:** [November 24, 2022, 9:56am UTC](https://hub.mender.io/t/downloads-mender-io-access-denied-error/5398/3 "2022-11-24T09:56:02Z")
Hi, I’m experiencing the same problem as @danielbisar. Followed your instructions and verified the key (expires 2024-10-23). But when performing apt update I get the following error: _W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error:_ _[https://downloads.mender.io/repos/debian](https://downloads.mender.io/repos/debian) ubuntu/focal/stable InRelease: The following signatures were invd: EXPKEYSIG xxxxx Mender Team [mender@northern.tech](mailto:mender@northern.tech)_ Maybe it’s related to ubuntu 20 (focal)? Any help is very appreciated. Thanks ---
**Author:** ![robgio](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/robgio/32/1760_2.png) [@robgio](https://hub.mender.io/u/robgio)\ **Post date:** [November 24, 2022, 3:53pm UTC](https://hub.mender.io/t/downloads-mender-io-access-denied-error/5398/4 "2022-11-24T15:53:28Z")
Hi @Dave then you should rebuild your local repository index: can you try following steps? ```auto sudo apt-get clean sudo mv /var/lib/apt/lists /tmp sudo apt-get clean sudo apt-get update ``` Roberto ---
**Author:** ![Dave](https://avatars.discourse-cdn.com/v4/letter/d/ee7513/32.png) [@Dave](https://hub.mender.io/u/Dave)\ **Post date:** [November 24, 2022, 4:23pm UTC](https://hub.mender.io/t/downloads-mender-io-access-denied-error/5398/5 "2022-11-24T16:23:48Z")
Hi @robgio , I tried your instructions but unfortunately it did not resolve the problem. Still getting errors: _W: GPG error: [https://downloads.mender.io/repos/debian](https://downloads.mender.io/repos/debian) ubuntu/focal/stable InRelease: The following signatures were invalid: EXPKEYSIG xxxxx Mender Team [mender@northern.tech](mailto:mender@northern.tech)_ _E: The repository ‘[https://downloads.mender.io/repos/debian](https://downloads.mender.io/repos/debian) ubuntu/focal/stable InRelease’ is not signed._ I also noticed the not signed error. Could this be the cause? ---
**Author:** ![robgio](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/robgio/32/1760_2.png) [@robgio](https://hub.mender.io/u/robgio)\ **Post date:** [November 25, 2022, 7:43am UTC](https://hub.mender.io/t/downloads-mender-io-access-denied-error/5398/6 "2022-11-25T07:43:59Z")
Hi @Dave , the repository is actually signed, here’s my local test ```auto root@646c7a45d1b3:/# apt-get update Hit:1 http://archive.ubuntu.com/ubuntu focal InRelease Hit:2 http://security.ubuntu.com/ubuntu focal-security InRelease Hit:3 http://archive.ubuntu.com/ubuntu focal-updates InRelease Hit:4 http://archive.ubuntu.com/ubuntu focal-backports InRelease Get:5 https://downloads.mender.io/repos/debian ubuntu/focal/stable InRelease [3722 B] Get:6 https://downloads.mender.io/repos/debian ubuntu/focal/stable/main amd64 Packages [1730 B] Fetched 5452 B in 1s (4379 B/s) Reading package lists... Done root@646c7a45d1b3:/# cat /etc/os-release NAME="Ubuntu" VERSION="20.04.5 LTS (Focal Fossa)" ``` Can you list all your imported keys and verify if the new one is present? You should see at least one Mender key: ```auto $ apt-key list /etc/apt/trusted.gpg.d/mender.asc --------------------------------- pub rsa3072 2020-11-13 [SC] [expires: 2024-10-23] E6C8 5734 5575 F921 8396 5662 2407 2B80 A1B2 9B00 uid [unknown] Mender Team sub rsa3072 2020-11-13 [E] [expires: 2024-10-23] ``` If you see the old one, please remove it and import the new one again: ```auto $ apt-key del /etc/apt/trusted.gpg.d/mender.asc OK $ curl -fsSL https://downloads.mender.io/repos/debian/gpg | sudo tee /etc/apt/trusted.gpg.d/mender.asc ``` And verify if it matches `E6C8 5734 5575 F921 8396 5662 2407 2B80 A1B2 9B00` with the following command: ```auto $ gpg --show-keys --with-fingerprint /etc/apt/trusted.gpg.d/mender.asc ``` ---
**Author:** ![Dave](https://avatars.discourse-cdn.com/v4/letter/d/ee7513/32.png) [@Dave](https://hub.mender.io/u/Dave)\ **Post date:** [November 25, 2022, 8:34am UTC](https://hub.mender.io/t/downloads-mender-io-access-denied-error/5398/7 "2022-11-25T08:34:32Z")
Hi @robgio, I found the root cause of the problem. Besides mender.asc there was also an expired Mender key in /etc/apt/trusted.gpg. Removed the expired one from trusted.gpg and importing the new one resolved the issue. Thanks for all the support. ---
**Author:** ![SebSauer](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/sebsauer/32/1486_2.png) [@SebSauer](https://hub.mender.io/u/SebSauer)\ **Post date:** [February 21, 2023, 8:55am UTC](https://hub.mender.io/t/downloads-mender-io-access-denied-error/5398/8 "2023-02-21T08:55:26Z")
Hey, sorry to revive the topic here- I just did the express [installation according to documentation](https://docs.mender.io/downloads#express-installation) on a Debian 11 and ran into the same error. The documentary claims : > The Mender GPG public key and APT repository will be added to your trusted APT keychain and sources list respectively without asking for confirmation. Error-Log: ```auto W: https://downloads.mender.io/repos/debian/dists/debian/bullseye/stable/InRelease: The key(s) in the keyring /etc/apt/trusted.gpg.d/mender.asc are ignored as the file is not readable by user '_apt' executing apt-key. W: GPG-Fehler: https://downloads.mender.io/repos/debian debian/bullseye/stable InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 24072B80A1B29B00 E: Das Depot »https://downloads.mender.io/repos/debian debian/bullseye/stable InRelease« ist nicht signiert. (is not signed.) ``` ---
**Author:** ![pseyfert](https://avatars.discourse-cdn.com/v4/letter/p/da6949/32.png) [@pseyfert](https://hub.mender.io/u/pseyfert)\ **Post date:** [January 18, 2024, 11:55am UTC](https://hub.mender.io/t/downloads-mender-io-access-denied-error/5398/9 "2024-01-18T11:55:38Z")
Any update on this issue? I too just went through those instructions and get ```auto apt update … Err:27 https://downloads.mender.io/repos/debian ubuntu/focal/stable InRelease The following signatures were invalid: EXPKEYSIG 24072B80A1B29B00 Mender Team Reading package lists... Done ``` while the key looks fine ```auto pseyfert@canephora:~ > gpg --show-keys --with-fingerprint /etc/apt/trusted.gpg.d/mender.asc 12:54:23 pub rsa3072 2020-11-13 [SC] [expires: 2024-10-23] E6C8 5734 5575 F921 8396 5662 2407 2B80 A1B2 9B00 uid Mender Team sub rsa3072 2020-11-13 [E] [expires: 2024-10-23] ``` ---
**Author:** ![robgio](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/robgio/32/1760_2.png) [@robgio](https://hub.mender.io/u/robgio)\ **Post date:** [January 18, 2024, 12:00pm UTC](https://hub.mender.io/t/downloads-mender-io-access-denied-error/5398/10 "2024-01-18T12:00:51Z")
Maybe you also have the expired key in the old keyring. Does this command shows multiple Mender keys? ```auto sudo apt-key list ``` ---
**Author:** ![pseyfert](https://avatars.discourse-cdn.com/v4/letter/p/da6949/32.png) [@pseyfert](https://hub.mender.io/u/pseyfert)\ **Post date:** [January 18, 2024, 1:32pm UTC](https://hub.mender.io/t/downloads-mender-io-access-denied-error/5398/11 "2024-01-18T13:32:01Z")
yes, i did. now after fixing ```auto sudo apt-key list … /etc/apt/trusted.gpg.d/mender.asc --------------------------------- pub rsa3072 2020-11-13 [SC] [expires: 2024-10-23] E6C8 5734 5575 F921 8396 5662 2407 2B80 A1B2 9B00 uid [unknown] Mender Team sub rsa3072 2020-11-13 [E] [expires: 2024-10-23] ``` the error changes ```auto W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://downloads.mender.io/repos/debian ubuntu/focal/stable InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 24072B80A1B29B00 ``` ---
**Author:** ![robgio](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/robgio/32/1760_2.png) [@robgio](https://hub.mender.io/u/robgio)\ **Post date:** [January 18, 2024, 1:40pm UTC](https://hub.mender.io/t/downloads-mender-io-access-denied-error/5398/12 "2024-01-18T13:40:26Z")
Can you please retry to download the new gpg key and hit update? ```auto curl -fsSL https://downloads.mender.io/repos/debian/gpg | sudo tee /etc/apt/trusted.gpg.d/mender.asc apt-get update ```