diff --git a/branding/tasks/main.yml b/branding/tasks/main.yml
index e4e1ca5a02b55043eeed849a80f2a49b17bd7ea4..b7d44b2ecfeaaf895aa8db13bdcad98bc5d065f4 100644
--- a/branding/tasks/main.yml
+++ b/branding/tasks/main.yml
@@ -80,19 +80,14 @@
     - branding
     - tls
 
-- name: install gpg to install the apt_key
-  apt:
-    name: gnupg
-    state: present
-  tags:
-    - branding
-    - repos
-
 - name: ensure deployment of apt repository keys
-  apt_key:
-    data: "{{ lookup('file', item) }}"
-    state: present
-  with_items: "{{ branding_apt_keys }}"
+  copy:
+    src: "{{ item }}"
+    dest: "/etc/apt/trusted.gpg.d/{{ item|basename }}"
+    owner: root
+    group: root
+    mode: "0644"
+  loop: "{{ branding_apt_keys }}"
   when: branding_apt_keys is defined
   notify:
     - update apt cache