Caltech
Information Management Systems and Services
IMSS  /  News  /  Download the New Public Key for Linux Zoom Clients by 11/2

Download the New Public Key for Linux Zoom Clients by 11/2

September 18, 2022

Effective November 2, 2022, Zoom will retire the current key pair used to sign the Zoom desktop client for Linux. To avoid service disruption, Linux users should download and trust the new public key before November 2nd. Users must download the new public key before attempting to upgrade to version 5.12.6, otherwise they will be unable to install this update. Prior versions (before 5.12.6) will not be impacted.

For versions 5.12.6 and higher, the Linux and Docker GPG signature thumbprint will change from "Key fingerprint: 3960 60CA DD8A 7522 0BFC B369 B903 BF18 61A7 C71D" to "Key fingerprint: 59C8 6188 E22A BB19 BD55 4047 7B04 A1B8 DD79 B481".

How to update the public key for Linux:

This is only required for accounts using signature validation. However, it is recommended for all Linux users to update this key directly from Zoom.

  1. Open the Download Center and download the package-signing-key.pub by clicking For version 5.12.6 or above download this key. 
  2. Open the Terminal app.
  3. Run the following commands based on the Linux distribution you're using:

Validate the .deb package on Debian, Ubuntu, Mint

For .deb package validation proceed with the following:

  1. Import the GPG public key to the local keyring using the following command:
    gpg --import ~/Downloads/package-signing-key.pub
  2. Verify the signed file using the following command:
    sudo apt install dpkg-sig && dpkg-sig --verify ~/Downloads/zoom_amd64.deb
  3. Enter your user password to proceed.
    A successful outcome for this command should be:
    Processing zoom_amd64.deb…
    GOODSIG _gpgbuilder

Validate the .rpm package on RedHat, CentOS, Oracle Linux, Fedora

For .rpm package validation proceed with the following:

  1. Import the GPG public key to the local keyring using the following command:
    sudo rpm --import ~/Downloads/package-signing-key.pub
  2. Enter your user password to proceed.
  3. Verify the signed file using the following command:
    rpm -K ~/Downloads/zoom_x86_64.rpm
    Successful outcomes for a valid signed file should be:
zoom_x86_64.rpm: rsa sha1 (md5) pgp md5 OK…zoom_x86_64.rpm: digests signatures OK

For more information, visit support.zoom.us. For other questions, contact the Help Desk (x3500, help@caltech.edu, https://help.caltech.edu).