Generate a key pair using GPG for Windows

GPG Key Generation

To generate a key pair using GPG for Windows:

  1. Download the GPG installer for Windows from www.gpg4win.org
  2. Run the installer and click Next >
  3. Make sure that the component Kleopatra is selected as one of the sub components to include in the installation and click Next >
  4. The default installation folder will be displayed. Click Install.
  5. Once the installation has completed, click Next >
  6. Make sure the checkbox Run Kleopatra is active and click Finish.
  7. Kleopatra will now open. Click the top menu File and select New OpenPGP Key Pair...
  8. Enter your full Name and your Email address.
  9. Make sure the checkbox Protect the generated key with a passphrase is active.
  10. Click Advanced Settings...
  11. For the option Key Material, select rsa4096 
  12. Activate the option Valid Until and select a date less than 10 years from now
  13. You will return to the Create OpenPGP Certificate window. Click OK.
  14. You will be asked to enter a passphrase and type it again in the field Repeat: to confirm you made no typing errors. Once done, click OK. PLEASE NOTE: Keeping a secure copy of this password is essential. Any loss of this password will require the whole process to be repeated.
  15. A pop-up will confirm the Key Pair has been successfully created. Click OK.
  16. In the Certificates panel, right-click on the newly created certificate and select Details...
  17. In the tab Subkeys, make sure that there is a subkey with the Usage "Encrypt". If the Encrypt subkey is present, close the Key Details panel and jump directly to step 18. Only in case the Encrypt subkey is missing, click on the button "Add subkey" in the bottom left corner and create a new subkey with those parameters: Algorithm=RSA 4096, Certificate Usage=Encryption. Activate Valid Until and select the same expiration date as the one you selected at point 12. Once the Encrypt subkey has been added, click on the button "Close" and go back to the Certificates panel.
  18. In the Certificates panel, right-click on the certificate you have created and select Export...
  19. Navigate to the directory where you want to save your the public portion of your key (e.g. Desktop). Choose a name such as publickey.asc and click Save.
  20. Open the Windows File Explorer and navigate to the directory where you saved the key. You will find the public.asc file ready to be sent to us via Message Center ticket or email as per instructions in this article.
  21. Although this is not strictly needed, we strongly recommend you to perform a backup of your Key Pair, following the steps here. This backup copy of the certificates can be imported again in Kleopatra in case the original set becomes corrupted or accidentally deleted.

Additional Information

Powered by IBot
Generate RSA key pair for Windows
Generate a key pair using GPG suite on macOS
How to set up sFTP for using certificate authentication on macOS
Generate a RSA key pair on macOS