How to ensure Package Signature Checking is Globally Activated
The gpgcheck option should be used to ensure that checking of an RPM package’s signature always occurs prior to its installation.
To force yum to check package signatures before installing them, ensure that the following line appears in /etc/yum.conf in the [main] section:
gpgcheck=1
