How-To PGP Sign files?

We are working with a financial institution on setting up data transfers which require us to PGP sign the datafiles that are being sent to them.

Can anyone please provide instructions for setting up IPA to sign the data using a PGP public key?

Thank you for your assistance.

Find more posts tagged with

Process Automation (IPA) - General Discussions

Accepted answers

All comments

unknown

You would need to load the public key provided from 3rd party to landmark server as a service. Then you will use encrypt node in your IPA and use that service name and file path to encrypt the file. Once the encrypted file is generated which can take a few minutes depending on the volume of data, you may need to use system command node to rename the file as per vendor specifications. Hope this helps.

russel-cornelson

Some of this depends on if you are On-Premise/ST/MT Landmark and what version you are are on.

For MT:
1. Talk to vendor and acquire their Public PGP key
2. Log into Gen Tenant, create a service definition
3. Goto the Service Properites of that service, and click create>upload public key
4. From your process flow set up an encrypt node and populate the "Service name" as the service that you uploaded the key to.
NOTE: When creating a service use a good name like "PGP_VENDOR_PUBLICKEY" so you will remember what it is for a year from now.

IMPORTANT NOTE#1
MOST Financial Institutions will actually require a Signed/Encrypted file. In which case you need to create a new service. "PGP_MYCOMPANYNAME_SIGNATURE". Then use the Generate PGP Key Pair Option on the service. And populate that on the Sign Service name,

IMPORTANT NOTE#2
Most Major financial institutions require a single pass encrypt/sign so from the encryption option pick "Sign&Encrpyt (single pass)"; versus a signed, encrypted file or an encrypted signed file.

russel-cornelson

You would also need to download the public key from your PGP_MYCOMPANYNAME_SIGNATURE key and send it to the financial institution

ewingm

The financial institution has requirements for the PGP key:

Key = RSA

Bit Strength = 2048

When I created the service with our private/public key pairs, it only prompted for an expiration date.

How do I check, or set parameters, to verify the other PGP requirements are met?

russel-cornelson

Good morning Michael,

If my memory serves me correctly Landmark Runtime Environment (security code) is responsible for creating the keys and they are rsa2048 keys.

To check:

1. I downloaded and installed GnuPG https://www.gnupg.org/
-- freeware

2. I went to my MT Test system created a service (PGP_TENANT) and generated a pgp key pair on the service, then downloaded the public key to my pc

3. I loaded that key into gpg
gpg --import C:Users<username>DownloadsPGPPublicKey.txt (or whatever you saved it as)

4. I then exported details about the key
gpg --list-key PGP_TENANT
or
gpg --list-keys

5. The output above shows this is a rsa2048 key

pub rsa2048 2024-02-14 [SC] [expires: 2026-02-13]
1145ACD572D7BC41BBEDADD70C1F062C49039FA9
uid [ unknown] PGP_TAMPRD04GDE02
sub rsa2048 2024-02-14 [E]

If you are on MT you should find the same information.

Copyright © 2025 Infor. All rights reserved.