Missing GPG Key EE4D7792F748182B for Debian 13 Repository

[alansilv4]

Hello Microsoft team,

I'm trying to install Microsoft Defender for Endpoint on Debian 13 (Trixie) following the official documentation:

https://learn.microsoft.com/en-us/defender-endpoint/linux-install-manually

However, when running apt update, I receive the following error:

Sub-process /usr/bin/sqv returned an error code (1), error message is: Missing key EE4D7792F748182B, which is needed to verify signature.

It seems that the repository at https://packages.microsoft.com/debian/13/prod is signed with the key EE4D7792F748182B, but this key is not included in the microsoft.asc key file provided at:

https://packages.microsoft.com/keys/microsoft.asc

As Debian 13 uses sqv for signature verification, this missing key prevents the repository from being used securely.

Could you please update the key file to include the required signing key, or provide guidance on how to securely install Defender on Debian 13?

Thank you!

[hironichu]

Im hitting the same issue

[markkuleinio]

As a quick look,

mdatp-xplat/linux/installation/mde_installer.sh

Line 815 in 2385434

if { [ "$DISTRO" = "ubuntu" ] && [ "$VERSION" = "24.04" ]; } || { [ "$DISTRO" = "debian" ] && [ "$VERSION" = "12" ]; }; then

compares the Debian version just against "12", not "13"

[dchokola]

Using https://packages.microsoft.com/keys/microsoft-rolling.asc instead of microsoft.asc worked for me.

You might try:
curl -fsSL https://packages.microsoft.com/keys/microsoft-rolling.asc | sudo gpg --dearmor -o /usr/share/keyrings/microsoft-prod.gpg

[markkuleinio]

https://packages.microsoft.com/keys/README says:

microsoft.asc (BC528686B50D79E339D3721CEB3E94ADBE1229CF):
This key was Microsoft’s standard Linux-signing key until Spring 2025, as discussed above. This key will not be used for newly-created repositories.

microsoft-2025.asc (AA86F75E427A19DD33346403EE4D7792F748182B):
This is the current standard Linux-signing key that will be used in newly-created repositories. It will work properly in distributions that disallow SHA1 signatures.

microsoft-rolling.asc:
This is currently a copy of microsoft-2025.asc. The intention is that this file will be updated in the future to include new keys as they are created and begin being used.

[H14d3n]

Did they even add support yet for Debian 13? Can't seem to get it working with all these Tips.
Please let me know when there are Infos.

[markkuleinio]

https://packages.microsoft.com/debian/13/prod/pool/main/ looks pretty much empty.

The .deb for Debian 12 seems to install fine on Debian 13, no idea if it works properly or not.

[alansilv4]

https://packages.microsoft.com/debian/13/prod/pool/main/ looks pretty much empty.

The .deb for Debian 12 seems to install fine on Debian 13, no idea if it works properly or not.

I switched to the Debian 12 repo (https://packages.microsoft.com/debian/12/prod.list) and the installation worked smoothly.
Not sure if everything will run perfectly long-term, but for now Defender is installed and running.
Appreciate the tip!

[markkuleinio]

Debian 13 instructions have been added and the installation seems to work:

https://learn.microsoft.com/en-us/defender-endpoint/linux-install-manually#ubuntu-and-debian-systems