PGP SETUP

IMPORTANT NOTICE: There may be security issues with the most recent versions of PGP. For this reason, we are recommending that you use PGP versions 6.5.8 or BELOW, and not any of the PGP 7+ versions.

This tutorial is based on a typical installation of PGP 6.5+. If you have a different version, the screens may look a bit different, but the procedure should remain the same.

 

When asked for name and company, enter whatever you wish. It really doesn't matter whether or not the name is yours.

You will be prompted to choose a directory. Just stick with the default directory to make it easy.

You will be asked which components you wish to install. If you have Outlook Express or Eudora e-mail programs then make sure the appropriate box is selected. In the latest versions of PGP (6.5.1/6.5.2) there is a new item called PGPnet. Do NOT select this unless you are aware of what it is, and know how to configure it.

You will be asked if you have existing keyrings to use. If you have another version of PGP and you want to use that version’s keyrings, enter the paths. But since this is the beginners guide to PGP you probably don’t so just go with 'No' and continue.

You will now be asked if you want to view the Read Me file. Uncheck this option unless you wish to read the file. Click on 'Finish'.

You will now need to allow PGP to reboot your computer.

After the installation is complete, you will notice that you have a small padlock icon (or an envelope and key icon, depending on which version you download) in your taskbar (the bar with the START button on the far left and the time of day on the far right—the icon will be to the near left of the clock). (1) Right click on the PGP icon and then click "PGPkeys".

You will see this screen. Click on 'PGPKeys'.

When the Key Generation Wizard opens, you may enter whatever nickname you want, but the Email address MUST be YOURACCOUNTNAME@securenym.net (ie: jsmith@securenym.net)

The next screen in the Key Wizard will ask you what type of key you want to generate. You may use either RSA or Diffie-Hellman keys.

When asked for the key size, you can pick anything from 1024 up. The larger the key size, the more secure it is, but the longer it will take to generate.

Your key should never expire. Later, you might want to change this, but for now, just keep it simple.

Now comes a really important item. You should enter a passphrase for your key. Since this is something that only you will ever know, you MUST remember it. It should be a combination of numbers and letters, and should NOT be something like your name, birthdate, social security number, or telephone number. If you use something this easy, you shouldn't even bother with encryption. As you enter the passphrase, the bar will move across the form. Your passphrase should move the bar at least halfway across. Just to make sure that you remember what you entered the first time, you'll have to enter the exact same phrase again.

PGP will now use a random data generator to create your key. When you click on next, your key will be created. This can take a minute or two, depending upon key size and the speed of your computer.

For SecureNym, you should NOT send your key to a keyserver. You will need to upload the key to SecureNym. This will be covered later.

When you click 'Finish' your new key will be added to your keyring and is ready to begin using.

Your keyring will now appear, and this is what it should look like. There are slight differences between PGP versions, but your key should be at the top. Click on the 'X' in the upper right corner to close.

PGP will now ask you if you want to creat a backup of your keyring. This is an excellent idea, but you MUST store the backup in a safe place, other than your hard drive. (a floppy disk, stored away from the computer) Remember, if someone is able to obtain this backup, they will have your private key.

If you choose 'Save, you'll be asked where you want to save the backup copy. If you cancel or choose 'Don't Save', you're done with the installation.

 

You should now click on the PGP icon on the toolbar at the bottom of your screen, and again, click on 'Launch PGP Keys'.

When your keyring appears, click on 'Edit'. From the menu that now appears and choose 'Preferences'. You will now see this screen, or something reasonably close depending on which version of PGP you have. (This is not critical, so you may skip this step.)

You should select IDEA as the preferred algorithm, but allow CAST, IDEA, and TripleDES as well. Now click on OK.

(This is required.) From the Keyring screen. Highlight the key you created for your account at SecureNym, as shown below.

Now click on 'Edit' and click 'Copy'. This will copy your public key onto the clipboard of your computer. Do NOT close the PGPkeys screen.

Make a connection to the internet, and from your browser, go to www.securenym.net and complete the login. When the welcome screen appears, click on 'Preferences from the menu. When the preferences screen appears, click on 'Upload' on the PGP Key line.

You will see the screen below. Click your mouse with the pointer anywhere in the white area. Now press the Ctrl and V keys at the same time. This will paste your key in the key area. Click on 'Upload Key Now' and your key is uploaded.

You will now be returned to the 'Preferences' screen, where you should click on 'Toggle' on the PGP Encryption line. The screen below will appear, and should show your key in the white area. Click on 'Turn PGP Encryption On'.

In a few minutes, your key will be activated with SecureNym, and all messages sent to you will be encrypted. You will need to decrypt them from your mail client, or by using the clipboard and PGP Tools. You may turn encryption on and off at anytime without having to upload your key again.

Should you ever want to generate a new key for SecureNym, you can do so easily. First, turm PGP Encryption off and then go to the 'Upload' area as above. Highlight the entire area in white, and use your keyboard's delete key to remove all text. Then simply paste your new key into the area, upload it, and turn encryption back on.