Docs Home / Compass / Download & Install / Verify Package Integrity

Verify RPM Packages (RHEL)验证RPM包（RHEL）

The MongoDB release team digitally signs MongoDB Compass packages to certify that packages are a valid and unaltered MongoDB release. Before you install MongoDB Compass, you can use the digital signature to validate the package.MongoDB发布团队对MongoDB Compass包进行数字签名，以证明该包是有效且未更改的MongoDB版本。在安装MongoDB Compass之前，您可以使用数字签名来验证包。

This page describes how to verify .rpm packages on RHEL operating systems.本页介绍如何在RHEL操作系统上验证.rpm包。

Before you Begin开始之前

If you don't have MongoDB Compass installed, download the MongoDB Compass binary from the Download Center.如果您没有安装MongoDB Compass，请从下载中心下载MongoDB Compass二进制文件。

Steps步骤

1

Import the MongoDB Compass public key in gpg and rpm以gpg和rpm格式导入MongoDB Compass公钥

curl https://pgp.mongodb.com/compass.asc | gpg --import

rpm --import https://pgp.mongodb.com/compass.asc

If the key imports successfully, the command returns:如果键导入成功，则命令返回：

gpg: key CEED0419D361CB16: public key "MongoDB Compass Signing Key <compass@mongodb.com>" imported
gpg: Total number processed: 1
gpg:               imported: 1

If you have previously imported the key, the command returns:如果您之前已导入键，则命令返回：

gpg: key A8130EC3F9F5F923: "MongoDB Compass Signing Key <compass@mongodb.com>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1
2

Verify the rpm file验证rpm文件

rpm --checksig <path_to_compass_rpm_file>

If the file is signed, the command returns:如果文件已签名，则命令返回：

<path_to_compass_rpm_file> digests signatures OK