PGP keys

A PGP key can be used for encryption, decryption, encryption within signing, and decryption with Signature verification to make transactions more secure.

Accessing and viewing PGP key list page
As the company administrator (admin), or IBM Support, or a business user, you can add, edit, or view the PGP key details by selecting the PGP keys tab in Keys and certificates within Company resources from the side navigation menu.
List of algorithms for a valid PGP key
When you upload a PGP public key, ensure that you refer to the list of algorithms for a valid PGP key.
PGP key expiration
When you create or upload your PGP keys, make sure that the key's expiration date is set according to the acceptable criteria. The optimal expiration period for a PGP key is less than or equal to 365 days.
Shareable PGP keys
When you create a PGP key, you can share it with your trading partners. A shareable PGP public key can be used by more than one trading partner.
Creating PGP key pairs
Whenever you create a PGP key pair, you either generate a key pair that has a private key and a public key or upload your own public key.
Deploying variant PGP keys
A variant PGP key has a different version of the PGP key that is deployed in the CTE and production environments.
Deploying nonvariant PGP keys
A nonvariant PGP key has the same version of the PGP key that is deployed in both the CTE and production environments.
Viewing PGP key details
After you deploy your PGP public key to the CTE and production environments, you can access the PGP key details page.
Testing PGP key connections
Before you deploy the PGP key to production, you must perform end-to-end testing. If you are deploying a key for the first time, consult IBM Support to configure a new business flow to test in the customer test environment (CTE). However, if you are updating an existing PGP key and have a working end-to-end working flow in CTE, use the flow to complete the testing before you deploy the key.
Editing PGP keys
A business user, company administrator (admin), , you can edit a PGP key that is in the Final status. You cannot edit a PGP key in the Work in progress status.
Compare PGP keys
As the company administrator (admin), or IBM Support, or a business user, you can compare PGP keys that are deployed in the CTE and production environments.
Cloning PGP keys
Sometimes, you might need to clone the PGP keys that you previously deployed to the CTE or production environments.
Skipping environment during PGP key edits
You can choose to skip either the CTE or production environment while editing the key. When you are editing a PGP key, you can use either the system-generated flow or the upload flow to skip an environment while deploying the PGP key.
Locking and unlocking PGP keys
You can lock a connection to restrict other users from working on the PGP key locked by you.
Transferring PGP key edits
You can transfer a PGP key that you are editing to another user. The Transfer edit feature is available only when the status of your PGP key is work in progress. You can edit a PGP key only until it is pushed to production deployment.
Switching PGP key type
On the PGP keys details page, an IBMer or your company administrator can update the PGP key details for you.
Discarding PGP key edits
As a user, company administrator (admin), or a representative of IBM Support team, you can discard the edit for a PGP key.
Overriding PGP key edits
A company administrator (admin) or IBM Support can override a PGP key edit by using different options.

Parent topic: Working with keys and certificates