Using Your PGP Tool to Update Your Address Settings for Encrypted Messaging

Transcription

1 Technology Help Desk HELP [4357] Using Your PGP Tool to Update Your Address Settings for Encrypted Messaging Overview The University of Pittsburgh is removing the plus sign from addresses and requiring SMTP authentication for all outgoing IMAP as of November 1, These changes provide enhanced security and make it easier to send messages from off-campus locations using clients such as Microsoft Outlook and Mozilla Thunderbird. If you use PGP Desktop , GnuPG, or other open source PGP software encryption tools with your client, you will need to add an alternate address to your existing key pair. Important: You only need to take action if the address attached to your key includes a plus sign (for example, [email protected]). If the address attached to your key does not include the plus sign, no action is necessary. Note: You can also generate a new key for an account instead of adding an alternate address to your existing key. However, if you choose to generate a new key, you will also have to revoke any existing key for that account. The instructions in this help sheet involve three basic steps: 1. First, make sure you have completed the steps in the help sheet Configuring IMAP Clients to Enable SMTP Authentication. 2. Open your PGP or GnuPG application and add a new University Computing Account address to your existing PGP key. 3. Verify that the newly added key is displayed. When you use your client to send PGP or GnuPG encrypted s from your University Computing Account, select this key. Windows Mac Linux Click an operating system below for instructions. File: Using Your PGP Tool to Update Your Address Page 1 of 7 June 2009

2 PGP and PGP Desktop for Windows 1. Open PGP Desktop, click the PGP Keys Control box, and then click All Keys in the Control box. You should see a list of all your keys. Note: Please note how your name is listed. You will need to enter your name in this format later in the document. Your address has a plus sign (+), which you will not provide when you add a new address to this key. 2. Click on the plus sign (+) next to the name of your key. 3. Right click on the icon (which resembles an envelope) and select Key Properties. 4. In the Key Properties window, click the Add Address button. File: Using Your PGP Tool to Update Your Address Page 2 of 7 June 2009

3 5. A PGP New User Name window displays. Enter your name and address in the text fields provided, then click OK. Note: You should enter your name in the same format that was used to create the key (see note in step 1). When you enter your address, do not include a plus sign (+). 6. In the PGP Enter Passphrase for Key window, enter the password that was used to create the key. Click OK. Note: Unless you check the Show Keystrokes box, you will not see the password as you type it. 7. Close the Key Properties window. 8. In the All Keys window you will see that a new address has been added to the key. If you click on the plus sign (+) sign next to the name, you can see the signature that is associated with it. Note: You can have multiple usernames or addresses for the same key. The key signature should not differ. 9. Close PGP Desktop. File: Using Your PGP Tool to Update Your Address Page 3 of 7 June 2009

4 PGP and PGP Desktop for Mac 1. Open PGP Desktop. Use the mouse to control-click on your key to show the key info. Select Show Key Info. 2. Your key info will display, as shown below. Note: Please note how your name is listed. You will need to enter your name in this format later in the document. Your address has a plus sign (+), which you will not provide when you add a new address to this key. File: Using Your PGP Tool to Update Your Address Page 4 of 7 June 2009

5 3. Click on the plus sign icon (+) next to the name of your key. 4. In the Add Name window, enter your name and address, then click OK. Note: You should enter your name in the same format that was used to create the key (see note in step 2). When you enter your address, do not include a plus sign (+). 5. In the PGP Enter Passphrase for Key window, enter the password that was used to create the key. Click OK. Note: Unless you check the Show Keystrokes box, you will not see the password as you type it. File: Using Your PGP Tool to Update Your Address Page 5 of 7 June 2009

6 6. Close the Key Info window. 7. In the PGP Desktop window, notice that a new address has been added to the key. If you click on the plus (+) sign next to the name, you can see the signature that is associated with it. Note: You can have multiple usernames or addresses for the same key. The key signature should not differ. 8. Close PGP Desktop. File: Using Your PGP Tool to Update Your Address Page 6 of 7 June 2009

7 PGP and PGP Desktop for Linux These instructions are designed as a set of general guidelines for Linux so that you can use GnuPG to modify existing PGP key pairs. Please note that many different versions of Linux exist. Commands or operations that are unique to a specific version of Linux may not be covered in this document. Note: You will need to know the password that you used to initially set up your PGP. If you do not remember the, then you will need to create a new key pair. If you choose to generate a new key, you will also have to revoke any existing key for that account. 1. Make sure that you are at the root level command prompt for your computer[root@yourcomputer ~]#. Type the following command: gpg --edit-key " John Doe (Optional Comment) <[email protected]>" adduid 2. You will see user and permission information displayed for the previously existing key pair. Type your Real Name in the following format: John Doe. Press the Enter key. 3. Type your University address (for example, [email protected]). Press the Enter key. 4. If you like, enter an optional comment that is associated with the key (for example, the University department with which you are affiliated). Press the Enter key. 5. All the information you have entered in Steps 2 through 4 will be displayed in a single USER-ID line with the following format: John Doe (Optional Comment) <[email protected]> Type O to accept your user information and press the Enter key. 6. When prompted, enter the password that protects the previously created secret key and press the Enter key. 7. You will see user and permission information for the account followed by information for the accounts associated with the key pair. You may see information such as that contained in this example: [ultimate] (1) John Doe (Optional Comment) <[email protected]> [unknown] (2) John Doe (Optional Comment) <[email protected]> 8. At the Command> line, type Quit, then press the Enter key. 9. When you are prompted to save your changes, type Y, then press the Enter key. Get Help The Technology Help Desk at HELP [4357] is available 24 hours a day, seven days a week to answer your technologyrelated questions. Questions can also be submitted via the Web at technology.pitt.edu. File: Using Your PGP Tool to Update Your Address Page 7 of 7 June 2009