PayFlex FTP - Wired Commute What is FTP? FTP stands for File Transfer Protocol. PayFlex uses FTP to send and receive files from our clients. We do so through a secure website that uses PGP encryption to protect the data that is being transmitted to and from the website. What is PGP? PGP stands for Pretty Good Privacy. Pretty Good Privacy (PGP) is a popular software program that uses powerful new technology called "public key" cryptography to encrypt and decrypt files to send over the Internet. PGP is the most widely used privacy-ensuring program by individuals and is also used by many corporations. Developed by Philip R. Zimmermann in 1991, PGP has become a de facto standard for e-mail security. PGP can also be used to encrypt files being stored so that they are unreadable by other users or intruders. To use PGP, you will need to purchase, download and install the software on your computer system. The software is available through the PGP website. The low-cost Desktop Home version (http://na.pgpstore.com/product.aspx?sku=3118544) available for $99 should meet the needs of most clients. How It Works PGP uses a variation of the public key system where each user has a publicly known encryption key and a private key known only to that user. In this system, the entity creating the file (PayFlex) will encrypt it using the recipient s public key and place it on their FTP website. This site allows for the transferring of files between two entities. The recipient will access the PayFlex FTP site with a secure logon id and password to retrieve the encrypted data file. Once retrieved, they will decrypt the file using their private key which is known only to them. How do I use FTP to retrieve and decrypt my PayFlex files? PayFlex will provide our clients via email with a secure logon id and password for our secure FTP site. Through your internet browser or Windows Explorer you will access the site and retrieve the file. The following steps can be used to walk you through the FTP process. 1) Purchase, download and install the PGP Software. (Note: The PGP Desktop Home version should meet most client needs. It is available through the PGP website at: (http://na.pgpstore.com/product.aspx?sku=3118544). However, professional and corporate versions are available should increased functionality be required. Please consult your IT department for additional recommendations. If you currently have a working version of the PGP software, this step may be skipped.) Once the software is installed, proceed to the next step.
2) Receive your Private and Public Keys and a Passphrase from your PayFlex representative for use in file encryption/decryption. Your PayFlex representative will provide you by email a file (Purchase Orders WC) which contains the public and private keys you will need to encrypt and decrypt files from PayFlex. You will also receive a Passphrase which will be used when you decrypt files. Store this item for future reference. When you receive the file you will need to complete the following steps: Double-click the file (Purchase Orders WC). The following screen will appear. Highlight the key (WiredCommute Client Payroll). Select Import. The following screen will appear. Select OK 3) Assign Implicit trust to your new set of keys Select the Padlock icon from the system tray and choose PGPKeys from the available options. Right-Click the WiredCommute Client Payroll key and select Key Properties from the available options.
The following screen will appear Check the Implicit Trust box and click Close. PGP will use this new trusted key to decrypt files you retrieve from PayFlex. 4) Retrieve files from the PayFlex FTP site. PayFlex will use your public key to encrypt your files. We will place encrypted files on the PayFlex FTP site for you to retrieve. To do so, you will need a personal login and password. Obtain your personal logon ID and password from your PayFlex representative. Login: Password:
5) Retrieve your files When PayFlex has created a file for you, they will place it on the PayFlex FTP site. To retrieve the file you will need to access the PayFlex FTP site. To do so enter ftp.payflex.com on the address line of your internet browser or Windows Explorer screen. You will see the following screen. Logon to the site using the login and password that you were provided. Once the username and password have been entered, you will see a screen similar to the following, where the file(s) you can retrieve are located. Right-click on the file you wish to retrieve and copy it to your clipboard. You can then paste it to the desired location on your network. (Note: Once you have successfully copied the file to your network, it is advised you delete the file from the FTP site. Deleting the file is a good idea. It indicates that you have already downloaded the file for that month. It also prevents the site from being filled with multiple files. This is done by highlighting the filename and pressing delete.)
6) Open your retrieved file. Through Windows Explorer find your retrieved file on your network. To decrypt and open the file, double-click the file. The PGPmail Enter Passphrase window will appear: Enter the passphrase you received from your PayFlex representative back in Step 2. Your private key will be used to unlock the file. Your file will open. You are free to work with it as you like. 7) Done