A DevOps engineer is installing the Instana agent on Ubuntu 22.04 LTS. During repository configuration, they must ensure the APT package manager can authenticate packages from the Instana repository. What must be added to trust the Instana APT repository?
Select an answer to reveal the explanation.
Short Explanation and Infographic
When configuring an APT repository on Debian or Ubuntu systems, a GPG signing key must be imported so that APT can cryptographically verify the authenticity of downloaded packages. Instana provides a GPG public key that administrators must add to the system APT keyring before the repository is trusted and packages can be installed. This is a standard Linux package management security step and is entirely separate from SSL certificates or product license keys.
Full explanation below image
Full Explanation
When configuring an APT repository on Debian or Ubuntu systems, a GPG signing key must be imported so that APT can cryptographically verify the authenticity of downloaded packages. Instana provides a GPG public key that administrators must add to the system APT keyring before the repository is trusted and packages can be installed. This is a standard Linux package management security step and is entirely separate from SSL certificates or product license keys. The correct answer is 'Import the Instana GPG signing key into the APT keyring'. The incorrect options — 'Add the Instana root CA certificate to the system certificate trust store', 'Generate a self-signed certificate using the Instana backend credentials', 'Use the Instana license key as an APT authentication token' — are wrong because they do not align with IBM Instana's architecture or recommended practices for this scenario. Understanding this concept is essential for the Domain 3: Installation domain of the IBM Instana Observability certification.