Update center signature checking is disabled

1 minute readKnowledge base

Issue

In the past, you may have added the startup argument:

-Dhudson.model.DownloadService.noSignatureCheck=true

It was likely done to work around some issue, such as Why is there Failed Signature Check when using update server?.

This argument disables signature checking for the plugin update center and download service, and should only ever be a temporary workaround, never a permanent solution.

You may have been redirected to this article from Jenkins Health Advisor by CloudBees, as we are working to clean up instances that are still running with this argument.

Resolution

We recommend you remove the -Dhudson.model.DownloadService.noSignatureCheck=true startup option from your instance, following How to add Java arguments to Jenkins? so that signatures are checked when using the plugin manager.

If you have any troubles doing so, please reach out at https://support.cloudbees.com.

This article is part of our Knowledge Base and is provided for guidance-based purposes only. The solutions or workarounds described here are not officially supported by CloudBees and may not be applicable in all environments. Use at your own discretion, and test changes in a safe environment before applying them to production systems.