Key Management

Key Manager - Importing Keys

You might want to import keys for the following reasons:

1. You want to use a key from a public authority (CA) rather than generating one in FAOPGP CLS. You might want to do this if you want other people to be able to automatically verify your signature without having to import your key.  If you generate a key in FAOPGP CLS it is not automatically recognized by others (because it has been self-signed and cannot be checked back to a public authority).

2. You want to be able to send encrypted files to other people. If you do not import their encryption key(s) then you will not be able to encrypt files for them.

3. A person who has sent you signed files has generated a self-signed key using FAOPGP CLS, FileAssurity OpenPGP, PGP or another OpenPGP application and you want to to be able to verify the files came from them and have not been tampered with. See self-signed keys for more information.

NOTE: When you import other peoples keys, they can only be used to verify files and to encrypt files for them.

Keys can be imported to Key Manager using the Import Key File option or by double-clicking on a key file in Windows Explorer. You may import keys stored in the file fromats .asc, .pgp, .gpg, .p12, .pfx, .p7b, .cer, . pkr, .skr.   It does not matter what tab is selected in Key Manager as FAOPGP CLS automatically works out where to store the key depending on the type of key file being imported.

NOTE: If someone has e-mailed a key to you it must first be saved to disk before it can be imported.


To import a key (key file)

1. From the File menu select 'Import Keys'

2. The following dialog is displayed:



Locate the key, either by typing in the location and file name or browse for it using the directory tree.

Press  once you have selected a key file.

3. The following dialog is displayed:

NOTE: If you are importing a key file that contains a private key then a password dialog will be displayed. You need to enter the password that protects the key file in order for the key importer dialog to be displayed.



Select the keys you want to add to Key Manager by checking the appropriate boxes in the 'Add' column.  Then press to add the keys you have selected to your keystore.

NOTE: Where a key also has a chain, all the keys in the chain are shown.  Selecting the first key in the chain and checking the box in the 'Add' column automatically selects the chain.

If a key with an identical identity (the actual cryptographic key is the same) is already present in Key Manager, you are prompted as to whether you want to overwrite the existing key in your keystore with the imported one.

4. On successful importation of the key(s) a dialog box is displayed informing you of the number of keys imported:



NOTE:  When a chain has been imported, all the keys in it will be reported as being added, not just the one from the sender.


Buttons

selects all available keys (all of the check boxes in the 'Add' column are selected)

removes all the selections currently made (the 'Add' column selections are cleared)

shows advanced key information for the currently selected (highlighted) certificates.

NOTE: You do not need to add a key to your keystore to use this function.  You can use it to check information about the key before adding it. Where a key chain is shown you must highlight the specific key in the chain for which you wish to see advanced information.

adds the selected key(s) to your keystore


Notes
Notes associated with each key can be edited at this stage, or at any time after the keys have been imported into Key Manager.  

 Highlight a key and then select this button to edit the key's notes

 Select this button to save your edited notes

 Select this to remove any changes you have made



Invalid Keys

If the keys you have selected are invalid for any reason, you will not be able to import them. A message will be displayed on the Key Import dialog explaining why they have failed - for example, 'Cannot add keys, key chain invalid'.
The only option you can select is