SAS Viya 3.x deployment or update processes that are executed via the site.yml playbook or the update-only.yml playbook might fail with the following messages:

    "stderr_lines": [
        "The GPG keys listed for the \"SAS packages for repository <repository name>\" repository are already installed but they are not correct for this package.",
        "Check that the correct key URLs are configured for this repository.. Failing package is: sas-compsrv1-01.21.05-20220923.102730959280.x86_64",
        " GPG Keys are configured as: file:///etc/pki/sas/rpm-gpg/RPM-GPG-KEY-sas",
        "Error: GPG check FAILED"
    ],

To circumvent this problem, run the following commands on all of the machines in the SAS Viya deployment. 

sudo yum update -y sas-meta-repo

If the command updates the package or returns "No packages marked for update,"  execute the following command to print the sas-meta-repo package version:

rpm -q sas-meta-repo

If you have sas-meta-repo-5-1.noarch, run the following command: 

sudo rpmkeys --import /etc/pki/sas/rpm-gpg/RPM-GPG-KEY-sas-2022

If you have sas-meta-repo-6-1.noarch, the rpmkeys command is not needed.

Alternatively, you can use Ansible to run the commands on all machines, as shown in the example below. Note that you should execute the commands in the sas_viya_playbook directory:

ansible all -b -m shell -a "yum update -y sas-meta-repo"
ansible all -m shell -a "rpm -q sas-meta-repo"
ansible all -b -m shell -a "rpmkeys --import /etc/pki/sas/rpm-gpg/RPM-GPG-KEY-sas-2022"

After you execute the necessary commands on all SAS Viya machines, execute the failing playbook again.