Create PGP Secret Subkey

You can create a new PGP Secret Subkey from the PGP Secret Key page.

1. From the Administration menu, select Trading Partner > PGP > PGP Secret Key.
2. Next to Create a new PGP Secret Subkey, click Go!.
3. Enter the following information and click Next.

   Field Name	Description
   Master Key	Required. A key that is associated with every Subkey being created. Note: Master Key is the PGP Secret Key. Master key is used for authentication and signing of PGP Secret Subkey. Expired Master Keys are not listed in the Master Key dropdown list for Subkey creation in UI. Expired Master Keys are not allowed for Subkey creation using REST APIs.
   Key Name	Required. Unique name of the PGP Secret Key.
   Key Algorithm	Required. Select the key algorithm as RSA, DSA, or ELGAMAL.
   Key Strength	Required. Select the Key Strength value as per the Key Algorithm. Valid values are: RSA - 1024, 2048, 3072, or 4096 DSA - 1024, 2048, or 3072 ElGamal - 1024, 2048, 3072, or 4096
   Key Validity (days)	Required. Number of days the Secret Key is valid. The default value is '0', which sets validity period of a lifetime.
   Validate Expiry	Optional. Key expiry validation during runtime. If you select the check box and the key has expired, the system stops the cryptographic operation. If you clear the check box and the key has expired, the system continues to perform the operation.
   Key Usages	Required. Specifies the key usage and the supported types are Signing, Encrypt, and Authenticate. Note: Every key usage has a distinct cryptographic operation and performs only the specified function.

4. After completing the PGP Secret Subkey configuration, review the settings on the Confirm page and click Finish.