GPG Key Generation
To generate a key pair using GPG for macOS
If you elected to receive your statements in an encrypted form, you would first need to generate an RSA Key pair.
- Download the GPG Suite for macOS
- Double click on the downloaded installation file:
- Cliick on Install
- Click on Continue
- Click on Install
- Click Install
By default the installation includes an add-on for Apple Mail called GPG Mail. If you do not use Apple Mail and do not need this add-on, you can de-select it during this step.
- Click on Close
- Launch GPG Keychain. The Generate new key pair dialog box should automatically open. Input your Full Name and your Email. Choose a Password and confirm that password. PLEASE NOTE: Keeping a secure copy of this password is essential. Any loss of this password will require the whole process to be repeated.
- Expand the Advanced Options menu
- Make sure the Key Type is set to RSA and RSA (default)
- Make sure the Length is set to 4096
- Activate the option Key will expire on and select a date less than 10 years from now
- Click on the button Create Key
- Once the key pair is created it will be listed in the GPG Keychain
- Double click your key pair to open the Key Details window. Select the Subkeys tab and select the subkey. In the panel at the bottom, make sure that the Capabilities show the letter e (for encrypt). If the e is present, close the Key Details panel and jump directly to step 16 . Only in case the "e" is missing, click on the + (plus) icon next to the gear icon and create a new subkey with those parameters: Algorithm=RSA (encrypt only), Length=4096. Activate Valid Until and select the same expiration date as the one you selected at point 12. Once the Encrypt subkey has been added, close the Key Details panel and go back to the GPG Keychain
- From the GPG Keychain, right click on the key pair you have created and select Export...
- Choose a location to save the key pair in the Where field and make sure that the checkbox Include secret key in exported file is deactivated. Click on Save.
- You will receive a prompt indicating that the key pair was created successfully. Click on No, Thanks\! to prevent uploading the public key to the PGP servers.
- Open Finder and go to the location you selected for saving the public key (at point 17).
- Send the public key file to us via Message Center ticket or email as per instructions listed here.
Additional Information
- Using GPG/RSA encryption keys to guarantee the privacy and security of your Reports
- Generate a key pair using GPG for Windows
- Decrypt your Reports using GPG for Windows
- Decrypting Reports using your PGP Key pair on macOS
- Generate RSA Key Pair on Windows
- How to Access your Reports using sFTP on Windows
- How to Access your Reports using sFTP on MacOS
- How to set up sFTP for using Certificate Authentication on Windows
- How to set up sFTP for using Certificate Authentication on macOS
- How to backup your public/private Key pair
- How to transfer your public/private key pair from one computer to another