Uploading a PGP Key to an external organization's PGP Encryption Server so future emails can be automatically encrypted

Products

• Endpoint Encryption
• PGP Command Line
• PGP Encryption Suite
• PGP Key Management Server
• PGP Key Mgmt Client Access and CLI API
• PGP SDK
• Desktop Email Encryption
• Drive Encryption
• Encryption Management Server
• File Share Encryption
• Gateway Email Encryption

Issue/Introduction

The PGP Encryption Server maintains a vast array of encryption solutions. 

One option is to be able to send a secured message and the data can be read securely without installing any software.  This functionality is called Web Email Protection:

153186 - How to use your Symantec Web Email Protection account for secure communications with your client

 

If you already have PGP Encryption software, and you correspond with an organization who uses a PGP Encryption Server, you can upload your PGP Key for future email encryption to your individual key.

This article will show you how to use the WEP functionality to upload your PGP Key instead of using the secure delivery.

Resolution

Uploading your own PGP Key to a PGP Encryption Server is possible with the following steps, if the Web Email Protection option has been enabled.

In a normal flow, the first step the user will receive a "Welcome" email such as the following:

Step 1: User goes to the login page and will establish their passphrase. 

Step 2: Once the passphrase has been established for Web Email Protection login, they will also be presented with the option to choose the secure delivery method:

Notice Symantec Web Email Protection is the default option, but to upload your own PGP Key to the organization's PGP Encryption Server, chose the "Key" option:

Step 3: Now you can browse to your own PGP Key:

Step 4: Now you will have a message to state you uploaded your key to this organization's PGP Encryption Server:

Step 5: As part of this process, you will be presented with the option to download this organization's Organization Key
Note: The organization's signing key that establishes trust for all their users.

It's recommended to download, sign and trust this key, so that any PGP Keys you receive from this organization, will automatically be verified:

Step 6: Now all future email from this organization will be encrypted to your own PGP Key and you can encrypt and decrypt as you normally do.

For more information on this topic, see the following article:

153186 - How to use your Symantec Web Email Protection account for secure communications with your client