Focus: PGP encryption exemplified by GnuPG

1. How does PGP work?
2. How do I add a public key to the public key ring?
3. How do I add the private key to the private key ring?
4. How do I trust a public key?
5. What do I have to check if encryption fails?
6. Is there a way to test the encryption?
7. Where do I find further information on PGP?

How does PGP work?

PGP is a special encryption software to be installed separately on the server.
When encrypting with PGP, two different keys are used on both the sending and the receiving side:
  • A "Public Key" to encrypt outgoing mails and/or to verify incoming signed mails.
  • A "Private Key" to decrypt incoming mails and/or to sign outgoing mails.
The public key is stored in the "Public Key Ring" and the private key in the "Private Key Ring". A public key must explicitly be trusted, with 6 different trust levels available (Web of Trust).

How do I add a public key to the public key ring?

Ask you communication partner to transmit his public key by e-mail. To store that public key (e.g. public-key.gpg) in the public key ring, enter the following at the command line:
"gpg --import public-key.gpg"

If you communicate with many/unknown partners by encrypted e-mails, configure the sample job "SAMPLE - Import Key for GnuPG". Please note that under Operations --> Program Settings, the parameter
"/c C:\Programme\GnuPG
ewkey.cmd"
has to point to the location of that script. The script newkey.cmd script (Comments tab) needs to be adjusted according to your GnuPG/PGP configuration.

How do I add the private key to the private key ring?

At the command line, enter
"gpg --gen-key"
or the appropriate PGP command line and follow the instructions.

How do I trust a public key?

Important: Regarding the different levels of trust, please read the documentation at the GnuPG homepage!

What do I have to check if encryption fails?

Test the encryption using the command line. The command to be used can be simply copied from the iQ.Suite configuration. For details on the command syntax, refer to the encryption programâ??s website.

Is there a way to test the encryption?

You can test the encryption together with our Support. To do so, simply use our public key.

Also, if you want us to return an encrypted mail to test decryption, please send your public key with a short message to:
hotline@group-technologies.com

Where do I find further information on PGP?

The GNUPG homepage provides a detailed in-depth description of the open source cryptography software GNUPG.