ARTIFACTORY: Support for multiple GPG keys in Artifactory

From Artifactory 7.19.4 multiple GPG keys can be uploaded on Artifactory from Administration->Artifactory->Keys Management..

How to add keys in the Key management section and add them into the debian/rpm repository is explained below.

From Artifactory Debian/rpm repository configuration (Administration-> Repositories->Repositories->debian-local->Advanced->GPG key pair -> Primary and secondary keys. Once the GPG keys are added in the Key management we will be able to see all of them in the drop down list present in the primary and secondary keys section. 

Why do we need primary and secondary keys? Having 2 keys mandatory?

Although it is not mandatory to have two keys for a repository, it is easy to recover if the primary key is deleted, we can still sign the packages using the secondary key. The secondary key just acts as a backup key.


From the rpm/debian repository configuration section, we will be able to assign the GPG keys to the repository and we need to make sure the (debian/rpm) clients are configured accordingly.