2. What Is the Purpose of Exporting Your Public Key to the Directory Services Server?
This article was written by guest tech blogger Peter Selmeczy.
In this guide nosotros'll show you how to generate an OpenPGP key in 4 quick and easy steps then you can start communicating securely instantly.
We'll be showing you two unlike ways of doing this:
- Using PrivateMail
- Using Kleopatra
On top of this, we'll also evidence yous how to export keys to keyservers, and find the public keys of others.
Generate an OpenPGP Key Pair using PrivateMail
If yous're a PrivateMail user, then you lot can generate a private key past logging into your account hither, and follow these steps.
- Once logged click Settings in the top right corner, and then select OpenPGP in the left paw carte du jour
- If yous haven't all the same, enable OpenPGP by ticking the box and click Save
- Click Generate New Keys
- Select the email address you wish to generate the key for
- Enter the password for your keys (this doesn't have to be your business relationship password)
- Cull your preferred key length (4098 is more secure, but not necessary)
- Your keys are now prepare and you lot tin export, import, and generate new keys using the relevant buttons
Generate an OpenPGP Key Pair Locally
If you lot are not a user of PrivateMail still, then yous can also generate OpenPGP keypairs using a number of different open source software. We prefer Kleopatra as it'due south one of the most common ones. You tin can download Gpg4win for Windows and Kleopatra for Linux to get it. You tin can too find a list of supported software on the official OpenPGP website.
To generate an OpenPGP central pair using Gpg4win, follow these steps in one case you've installed it.
- Click "File" then "New Fundamental Pair"
- In the cosmos wizard enter your proper noun and email address (optional). In the advanced settings you tin can also change the key strength and a few additional options.
- One time you confirm the creation, enter and echo your passphrase
- Once information technology's created you lot'll be able to back it up (recommended) and besides share information technology with others.
Exporting Public Fundamental to Directory Services
In this step, we'll show you lot how to export your public fundamental to a directory service. Unfortunately, PrivateMail doesn't support this nevertheless, and then nosotros'll be using using Gpg4win/ Kleopatra.
If you created your key pair using the above steps you'll be able to immediately select "Upload Public Central To a Directory Service" to do. However, we're going to assume you'll wish to share a previously created key.
- Import your document past clicking the Import button and finding your certificate file(s)
- Correct click on your key, and click "Publish on Server"
- Your Primal is at present public
- If yous click "Lookup on Server" you'll be able to search for information technology, every bit well as others.
Optionally, you can also generate a revocation document. The reason for this is that once you make a certificate public, it volition forever remain public. However, with a revocation document you'll be able to declare it unused. Here are the steps to generate a revocation certificate in Kleopatra.
- Right click on your called certificate and click details
- When prompted, relieve the file in your chosen location, and enter your passphrase
- Edit the certificate in Notepad (or similar) to exist able to use it
- In Kleopatra click Import
- Your certificate is at present revoked
- If yous go to "Lookup on Server" you will no longer exist able to notice the key.
What is the purpose of exporting your public cardinal to the directory services server?
The purpose of exporting your public key is that it allows people to encrypt letters that they wish to ship to you lot. Without it, any messages they send would exist unencrypted. Y'all are and then able to decrypt the message using your private key. This is why information technology's of import to never share your individual key with anyone else.
In Kleopatra y'all tin apply "Look up on Server" to find all available public keys
In this guide we'll show you how to generate an OpenPGP key in iv quick and easy steps so yous can start communicating securely instantly.
Nosotros'll be showing you two different means of doing this:
- Using PrivateMail
- Using Kleopatra
On elevation of this, we'll besides show y'all how to export keys to keyservers, and detect the public keys of others.
Generate an OpenPGP Key Pair using PrivateMail
If you're a PrivateMail user, then yous tin can generate a private key by logging into your account here, and follow these steps.
- In one case logged click Settings in the top right corner, and and then select OpenPGP in the left hand card
- If you haven't yet, enable OpenPGP past ticking the box and click Save
- Click Generate New Keys
- Select the email address you wish to generate the central for
- Enter the password for your keys (this doesn't take to be your business relationship password)
- Choose your preferred central length (4098 is more than secure, but not necessary)
- Your keys are at present fix and you can consign, import, and generate new keys using the relevant buttons
Generate an OpenPGP Cardinal Pair Locally
If you are not a user of PrivateMail nonetheless, and then y'all can as well generate OpenPGP keypairs using a number of different open up source software. We prefer Kleopatra as information technology's ane of the near common ones. You can download Gpg4win for Windows and Kleopatra for Linux to go it. You tin besides find a list of supported software on the official OpenPGP website.
To generate an OpenPGP key pair using Gpg4win, follow these steps in one case you've installed information technology.
- Click "File" so "New Central Pair"
- In the creation magician enter your name and email address (optional). In the advanced settings you can also change the key forcefulness and a few additional options.
- Once y'all confirm the creation, enter and repeat your passphrase
- Once it's created y'all'll be able to back it upward (recommended) and also share it with others.
Exporting Public Key to Directory Services
In this step, we'll show you how to export your public key to a directory service. Unfortunately, PrivateMail doesn't support this yet, and so we'll exist using using Gpg4win/ Kleopatra.
If you created your key pair using the above steps you'll be able to immediately select "Upload Public Key To a Directory Service" to exercise. Even so, we're going to assume you lot'll wish to share a previously created key.
- Import your certificate by clicking the Import push and finding your certificate file(s)
- Right click on your cardinal, and click "Publish on Server"
- Your Key is now public
- If you click "Lookup on Server" yous'll be able to search for it, as well as others.
Optionally, yous can too generate a revocation document. The reason for this is that one time yous make a certificate public, it volition forever remain public. Notwithstanding, with a revocation certificate you'll exist able to declare it unused. Here are the steps to generate a revocation certificate in Kleopatra.
- Right click on your chosen certificate and click details
- When prompted, save the file in your chosen location, and enter your passphrase
- Edit the certificate in Notepad (or similar) to be able to utilize it
- In Kleopatra click Import
- Your certificate is now revoked
- If you go to "Lookup on Server" you will no longer exist able to detect the key.
What is the purpose of exporting your public key to the directory services server?
The purpose of exporting your public key is that it allows people to encrypt messages that they wish to transport to you. Without it, whatever messages they transport would be unencrypted. You are then able to decrypt the message using your private key. This is why it'southward important to never share your private cardinal with anyone else.
In Kleopatra you can employ "Look upward on Server" to find all available public keys
Source: https://privatemail.com/blog/how-to-generate-an-openpgp-key-with-privatemail-or-kleopatra/
0 Response to "2. What Is the Purpose of Exporting Your Public Key to the Directory Services Server?"
Post a Comment