Generate S/MIME or PGP private key

If the Email Gateway is operating in FIPS mode, you will be unable to create PGP keys. PGP encryption uses algorithms that are not supported.

You can use the Email Gateway to generate private S/MIME and PGP keys. These keys can be used for signing and encryption in mail encryption endpoints.

You can only self-sign generated S/MIME keys using a generated signing certificate. You cannot self-sign generated PGP keys.

How do I...

• Create and self-sign a private S/MIME key

  1. Navigate to System > Encryption and click Certificate Store.
  2. In the Task panel, click Generate certificate/key.
  3. In the Type list, select S/MIME.
  4. In the Sign With list, select a signing certificate that you have created yourself.

  5. Follow the instructions on screen and make the other selections that you need.

     What do I need to know?

     • Type only ASCII printable characters in the text boxes.
     • Mouse over the pink Required text boxes to display tooltips for those fields.
  6. Click Generate.
  7. Apply the configuration.
• Create an S/MIME key using a Trust Center

  1. Navigate to System > Encryption and click Certificate Store.
  2. In the Task panel, click Generate certificate/key.
  3. In the Type list, select Trust Center.

  4. Follow the instructions on screen and make the other selections that you need.

     What do I need to know?

     • Type only ASCII printable characters in the text boxes.
     • Mouse over the pink Required text boxes to display tooltips for those fields.
  5. Click Generate.
  6. Apply the configuration.

  If you have not already configured authentication with a Trust Center, you will need to set up authentication on the Trust Center Configuration page before you can continue.

• Create a PGP private key

  1. Navigate to System > Encryption and click Certificate Store.
  2. In the Task panel, click Generate certificate/key.
  3. In the Type list, select PGP.

  4. Follow the instructions on screen and make the other selections that you need.

     What do I need to know?

     • Type only ASCII printable characters in the text boxes.
     • Mouse over the pink Required text boxes to display tooltips for those fields.
  5. Click Generate.
  6. Apply the configuration.

See also...

• Generate your own signing certificate
• Configure a Trust Center connection

• Apply the new configuration