Generate S/MIME or PGP private key

If Secure Email Gateway is operating in FIPS mode, you will be unable to create PGP keys. PGP encryption uses algorithms that are not supported.

You can use the Gateway to generate private S/MIME Secure Multipurpose Internet Mail Extensions (S/MIME) is a specification for secure email messages that uses the X.509 format for digital certificates and uses various encryption algorithms such as 3DES. and PGP keys. These keys can be used for signing and encryption in mail encryption endpoints.

You can only self-sign generated S/MIME keys using a generated signing certificate The certificate of the certificate authority that signed the key certificate. It contains the certificate authority's own public key. Also known as "root certificate".. You cannot self-sign generated PGP keys.

How do I...

• Create and self-sign a private S/MIME key

  1. Navigate to System > Encryption and click Certificate Store.
  2. In the Task panel, click Generate certificate A digital means of proving your identity. When you send a digitally-signed message, you are sending your certificate and public key. Certificates are issued by a certification authority and can expire or be revoked./key.
  3. In the Type list, select S/MIME.
  4. In the Sign With list, select a signing certificate that you have created yourself.

  5. Follow the instructions on screen and make the other selections that you need.

     What do I need to know?

     • Type only ASCII printable characters in the text boxes.
     • Mouse over the pink Required text boxes to display tooltips for those fields.
  6. Click Generate.
  7. Apply the configuration.
• Create an S/MIME key using a Trust Center

  1. Navigate to System > Encryption and click Certificate Store.
  2. In the Task panel, click Generate certificate/key.
  3. In the Type list, select Trust Center.

  4. Follow the instructions on screen and make the other selections that you need.

     What do I need to know?

     • Type only ASCII printable characters in the text boxes.
     • Mouse over the pink Required text boxes to display tooltips for those fields.
  5. Click Generate.
  6. Apply the configuration.

  If you have not already configured authentication with a Trust Center, you will need to set up authentication on the Trust Center Configuration page before you can continue.

• Create a PGP private key

  1. Navigate to System > Encryption and click Certificate Store.
  2. In the Task panel, click Generate certificate/key.
  3. In the Type list, select PGP.

  4. Follow the instructions on screen and make the other selections that you need.

     What do I need to know?

     • Type only ASCII printable characters in the text boxes.
     • Mouse over the pink Required text boxes to display tooltips for those fields.
  5. Click Generate.
  6. Apply the configuration.

See also...

• Generate your own signing certificate
• Configure a Trust Center connection

• Apply the new configuration