ConvertingCertificateToPgp

česky | english

Creating a new PGP key from your X.509 cert

This document was created for use with PGP 8.1

$/!\$ IMPORTANT: If you are using a smartcard do this BEFORE importing your new cert to your smartcard, PGP will fail with "Key already exists" if you try to send your new PGP key to your smartcard if the cert is already there.

Create your new cert
Export it to a p12 or PFX file
import it into PGP
opening PGPKeys
choose the "keys" menu
choose "import" from that menu
choose the file
click "open"
enter the passphrase for the cert if necessary.

$/!\$ NOTE: At this point you will receive a message saying "some of the keys imported are private keys. Trust values on these keys must be set manually via the Key Properties dialog.

You now have a PGP version of your cert, or if you choose to look at it another way, you have made a PGP keypair that is signed by your cert. However it is only good for signing.

right click on the key, choose "key properties"
click the "implicit trust" check box
click "close"
right click on your new key
Choose "sign"
click the checkbox that says "Allow signature to be exported. Others may rely upon your signature".
Click OK
If your keyring contains more than a single private key you will have to choose the key you are using.
enter the passphrase for the cert if necessary
click "ok"

NOTE: You now have a key that can be exported and used in GPG

$/!\$ IF YOU WANT TO USE THIS KEY FOR ENCRYPTION YOU MAY CONTINUE ON, otherwise skip to "IF YOU ARE USING A SMARTCARD"

Right click on the key and choose "Key Properties"
choose the "subkeys" tab
push the "new" button
choose the new key size, start date and expiration date
click "ok"
click "close"

$/!\$ IF YOU ARE USING A SMARTCARD: If you wish to keep a backup of the key, EXPORT THE KEYPAIR AND STORE IT IN A SAFE LOCATION, AS ONCE IT IS IMPORTED TO THE SMARTCARD YOU WILL NOT BE ABLE TO GET THE PRIVATE KEYS BACK OFF THE CARD.

Right click on your key and choose "send to" > "smart card"
Answer "yes" to the question "Do you want to delete the local copy of the private key"

You may now import your cert to your smartcard without issue.

CategoryStepByStep