Skip to content
HashiCorp · Developer toolsSep 10, 2026, 13:24 UTC

Hashicorp Linux packages GPG key rotation

MajorNot disclosedUpdated 16h ago
Sep 10, 13:24 UTCSep 10, 20:40 UTC
Duration
7h 17m
Impact
Major
Root cause
Not disclosed
HashiCorp, 90 days
19 incidents
Affected
Not listed by the vendor.
Status page

Final update

Our Engineering team has resolved the issue. These systems should now be operating normally. If you continue to experience any problems, please open a ticket with our support team.

Timeline

  1. Resolved · Sep 10, 20:40 UTC
    Our Engineering team has resolved the issue. These systems should now be operating normally. If you continue to experience any problems, please open a ticket with our support team.
  2. Monitoring · Sep 10, 16:35 UTC
    Our Engineering team has implemented a fix to resolve the issue. We are monitoring the situation closely and will post an update as soon as the issue is fully resolved.
  3. Identified · Sep 10, 15:50 UTC
    Our engineers have identified the issue and are working through remaining packages.
  4. Identified · Sep 10, 14:45 UTC
    We have updated the keys in the apt and rpm repos and the documentation. Our engineers are working to identify and re-sign packages signed with the older key
  5. Identified · Sep 10, 13:24 UTC
    We are currently updating documentation and package verification guidance following an ongoing **GPG** key rotation for all HashiCorp Linux packages. The fingerprint currently displayed on our site is outdated and may not match the active signing key. We are actively updating the published fingerprint information and related documentation. We will provide an update once the corrected fingerprint details are available.

More from HashiCorp

Full history

From vendors' own status pages and disclosures. Times as reported. Logos via logo.dev; trademarks belong to their owners.

Weekly: the week's major outages, postmortems and breaches, Saturday mornings.