See here for detailed instructions.The steps can be summarized at high level as below…
1. Add the 10gen server to the software repo list.
2. Add the 10gen GPG key via apt-key to trust and verify the 10gen repo server.
Note: if for some reason you have firewall issues to retrieve the key then you can save the GPG key into a file and import using apt-key. see here