Update center signature checking is disabled

1 minute readKnowledge base

Issue

In the past, you may have added the startup argument:

-Dhudson.model.DownloadService.noSignatureCheck=true

It was likely done to work around some issue, such as Why is there Failed Signature Check when using update server?.

This argument disables signature checking for the plugin update center and download service, and should only ever be a temporary workaround, never a permanent solution.

You may have been redirected to this article from Jenkins Health Advisor by CloudBees, as we are working to clean up instances that are still running with this argument.

Resolution

We recommend you remove the -Dhudson.model.DownloadService.noSignatureCheck=true startup option from your instance, following How to add Java arguments to Jenkins? so that signatures are checked when using the plugin manager.

If you have any troubles doing so, please reach out at https://support.cloudbees.com.