diff --git a/gerrit/acls/starlingx/public-keys.config b/gerrit/acls/starlingx/public-keys.config
new file mode 100644
index 0000000000..c5d5b9df3b
--- /dev/null
+++ b/gerrit/acls/starlingx/public-keys.config
@@ -0,0 +1,18 @@
+[access "refs/for/refs/*"]
+pushMerge = group starlingx-release
+
+[access "refs/heads/*"]
+abandon = group starlingx-public-keys-core
+create = group starlingx-release
+label-Code-Review = -2..+2 group starlingx-public-keys-core
+label-Workflow = -1..+1 group starlingx-public-keys-core
+
+[access "refs/tags/*"]
+createSignedTag = group starlingx-release
+
+[receive]
+requireChangeId = true
+requireContributorAgreement = true
+
+[submit]
+mergeContent = True
diff --git a/gerrit/projects.yaml b/gerrit/projects.yaml
index 336595b994..1dd1acea18 100644
--- a/gerrit/projects.yaml
+++ b/gerrit/projects.yaml
@@ -6435,6 +6435,11 @@
   use-storyboard: true
   groups:
     - starlingx
+- project: starlingx/public-keys
+  description: StarlingX Public Keys and Certs
+  use-storyboard: true
+  groups:
+    - starlingx
 - project: starlingx/rook-ceph
   description: StarlingX Rook Storage Application
   use-storyboard: true
diff --git a/zuul/main.yaml b/zuul/main.yaml
index 3414bca074..ad06d384b8 100644
--- a/zuul/main.yaml
+++ b/zuul/main.yaml
@@ -1042,6 +1042,7 @@
           - starlingx/platform-armada-app
           - starlingx/portieris-armada-app
           - starlingx/ptp-notification-armada-app
+          - starlingx/public-keys
           - starlingx/rook-ceph
           - starlingx/root
           - starlingx/SDO-rv-service