Previous Topic

Next Topic

Book Contents

Book Index

Managing PGP Keys

MOVEit Automation allows operators to create, delete, import and export locally stored PGP keys through MOVEit Automation Admin. MOVEit Automation stores PGP keys in files called keyrings.

There are two types of PGP keys: PGP public keys and PGP private/public keypairs.

PGP Public Keys

Public keys are non-secret keys that are often widely distributed to other users. To encrypt a file to send to someone, you must have a copy of their public key. If you sign the file, the recipient must have a copy of your public key in order to check the signature.

Typically you import the public keys of several other users into your keyring, and export your own public key to send to other users. There is usually little security risk associated with distributing your public key. (In fact, some people attach their PGP public key to every email message they send)

Operators can perform both import and export operations through MOVEit Automation Admin. In MOVEit Automation Admin, public PGP keys (for which you lack a private key) are displayed as Other Keys because other people have the private keys associated with these other keys.

PGP Private/Public Keypairs

Private/public keypairs (also known as secret keys or private keys) are secret keys that are generated by you and that contain information that must not be given to other users. A secret key also contains a copy of an associated public key. Although you rarely export your entire private/public keypairs (except possibly for backup purposes), you must export the public component of your private/public keypair in order to allow others to encrypt files to be sent to you.

Although a password is not required, private/public keypairs are generally encrypted with a password, so that if the private/public keypair file falls into the wrong hands, it cannot be used.

As a best practice, minimize the number of different secret keys, even though it is possible to have multiple priveate/public keypairs.

In MOVEit Automation Admin, private/public keypairs are displayed as My Keys because you have the private keys.

To manage PGP Keys in MOVEit Automation Admin, select Settings > Certs/Keys > PGP Keys.

The manage PGP Keys dialog box opens, listing all PGP keys:

Select a key to see that key's details.