Major incident

HashiCorp Services: Hashicorp Linux packages GPG key rotation

Current status of HashiCorp Services: Operational — live HashiCorp Services status

Timeline

1. Sep 10, 2026, 13:24 UTC
   identified
   We are currently updating documentation and package verification guidance following an ongoing **GPG** key rotation for all HashiCorp Linux packages. The fingerprint currently displayed on our site is outdated and may not match the active signing key. We are actively updating the published fingerprint information and related documentation. We will provide an update once the corrected fingerprint details are available.
2. Sep 10, 2026, 14:45 UTC
   identified
   We have updated the keys in the apt and rpm repos and the documentation. Our engineers are working to identify and re-sign packages signed with the older key
3. Sep 10, 2026, 15:50 UTC
   identified
   Our engineers have identified the issue and are working through remaining packages.
4. Sep 10, 2026, 16:35 UTC
   monitoring
   Our Engineering team has implemented a fix to resolve the issue. We are monitoring the situation closely and will post an update as soon as the issue is fully resolved.
5. Sep 10, 2026, 20:40 UTC
   resolved
   Our Engineering team has resolved the issue. These systems should now be operating normally. If you continue to experience any problems, please open a ticket with our support team.

Updates as published by HashiCorp Services.