How to create a PGP Private/Public key-pair to enable Bloomberg archiving in Veritas Alta Archiving (2024)

Description

Veritas Alta Archivingarchives Bloomberg data directly from the Bloomberg SFTP servers Root directory. This data is encrypted and requires a decryption key in order to be archived successfully. In order for decryption to occur a Private/Public keypair must be created, with the public key being uploaded to Bloomberg and the private being uploaded to Veritas Alta Archiving.

The following steps are from the Bloomberg SFTP Encryption Guide (written by Bloomberg Support), but have been simplified and updated as this document contains additional non-relevant steps for Veritas Alta Archiving. For any issues regarding the creation of the keypair please contact Bloomberg Support.

Creating the keypair

1. Download the latest version of GPG4Win
2. Run the GPG4Win installer. This will install Kleopatra and add new options to the Windows Right-Click menu
3. Open Kleopatra
4. Go to File > New Key Pair
5. Select the option Create a personal OpenPGP key pair
6. Type a Name/Email address (at least one is required to continue) and click Next
7. Click Create
8. Enter a passphrase for the keypair and clock OK
NOTE: Be sure to write down/remember this passphrase is it will be needed later
9. Click Make a backup of your keypair and save a local copy of the keypair for backup purposes
10. Enter the passphrase for the keypair and click Ok
11. Click Finish

Uploading the Private key to Veritas Alta Archiving

1. Open Kleopatra
2. Right click on the new keypair that was created earlier
3. Click Export Secret Keys
4. Save the file locally, adding the extension manually to the filename
NOTE: DO NOT save the key as "ASC". EV.conly accepts .PGP, .CER, or .CRT extensions
5. Login to Adminconsole with an administrator account
6. Go to Archive Collectors > Bloomberg Connector > Manage (3 dots at the top right)
7. In the Bloomberg Settings section enter in the following and click Save:
- Firm Code
- FTP Login
- FTP Password
8. On the Encryption Key section, click Browse and Upload. Navigate to the private key that was exported in step 4 of this article.
9. Enter the passphrase that was set during the keypair creation
10. Click Upload

Uploading the Public key to Bloomberg

1. Open Kleopatra
2. Right-click on the new keypair that was created earlier
3. Click Export
4. Save the file locally
5. Login to Bloombergs CCNS<GO>
6. Go to the Public Keys tab
7. Click Add
8. From the Key Type: drop-down, select Encryption
9. Open the public key, that was exported in step 4, in any text editor (ie: notepad)
10. Copy all of the contents of the public key and paste them into CCNS<GO>
NOTE: Be sure to include the "-----BEGIN PGP PUBLIC KEY BLOCK-----" and "-----END PGP PUBLIC KEY BLOCK-----" in the copied/pasted text
11. Click Add
12. Click Submit

Testing the decryption

1. After 3 days, the new public key will be used to encrypt the data on the Bloomberg side
2. Download the latest version of WinSCP
3. Install and open WinSCP
4. Use the following settings:
- File Protocol: SFTP
- Host Name: ftpcom.bloomberg.com
- Port Number: 30206
- User Name: <Users Bloomberg FTP username>
- Password: <Users Bloomberg FTP password>
5. Click Login
6. Right click on a file and click Download (Filename example: f123456.msg.171231.xml.gpg)
7. Once the file is downloaded, navigate to it in Windows Explorer
8. Right click on the file and go to More GpgEX options > Decrypt
NOTE: This step needs to be done on the same workstation/server where the keypair is installed in Kleopatra
9. Click Decrypt/Verify
10. If the decryption was successful, then the encryption and decryption keys are correct

How to create a PGP Private/Public key-pair to enable Bloomberg archiving in Veritas Alta Archiving (2024)

FAQs

How to create a PGP Private/Public key-pair to enable Bloomberg archiving in Veritas Alta Archiving? ›

To generate an SSH private/public key pair for your use, you can use the ssh-keygen command-line utility. You can run the ssh-keygen command from the command line to generate an SSH private/public key pair. If you are using Windows, by default you may not have access to the ssh-keygen command.

How do I create a public private key pair for PGP? ›

Generate A Key Pair
  1. Open a command shell or DOS prompt.
  2. On the command line, enter: pgp --gen-key [user ID] --key-type [key type] --bits [bits #] --passphrase [passphrase] ...
  3. Press "Enter" when the command is complete. ...
  4. PGP Command line will now generate your keypair. ...
  5. To display your new keypair enter the following command:
Jan 31, 2024

How to generate a public/private key pair? ›

To generate an SSH private/public key pair for your use, you can use the ssh-keygen command-line utility. You can run the ssh-keygen command from the command line to generate an SSH private/public key pair. If you are using Windows, by default you may not have access to the ssh-keygen command.

What is the difference between PGP public key and PGP private key? ›

PGP uses the public key system in which every user has a unique encryption key known publicly and a private key that only they know. A message is encrypted when a user sends it to someone using their public key, then decrypted when the recipient opens it with their private key.

How do I activate my PGP key? ›

Basic steps for using PGP
  1. Install PGP on your computer.
  2. Create a private and public key pair. Before you can begin using PGP, you need to generate a key pair. ...
  3. Exchange public keys with others. ...
  4. Validate public keys. ...
  5. Encrypt and sign your email and files. ...
  6. Decrypt and verify your email and files. ...
  7. Wipe files.

How do I create a public and private PGP key on a Mac? ›

Create a Keypair
  1. Open PGP Encryption Desktop.
  2. Click File and select New > PGP Key. ...
  3. To specify advanced settings for your new key such as key size, compression, or hashes, select the Expert Mode checkbox.
  4. Click Continue.
  5. Enter your Full Name and your email address in the Email Address field to be used for your key.
Feb 29, 2024

How do I get my PGP public key from GPG keychain? ›

Install GPG Keychain and import PGP Keypair

Open the GPG Keychain application and import the keypair file. It will ask for a password. Use the password saved on the vault item. Now you will be able to encrypt, decrypt, and share the public key with others.

What are the four types of keys used by PGP? ›

PGP makes use of four types of keys: one-time session symmetric keys, public keys, private keys, and passphrase-based symmetric keys. Three separate requirements can be identified with respect to these keys: 1. a means of generating unpredictable session keys is needed.

What to do with a PGP private key? ›

You use public keys to encrypt messages and files for others or to add users to PGP Virtual Disk volumes. You use your private key to decrypt files and messages that are encrypted with your public key.

How do I know if my PGP public key is valid? ›

The right way to validate this key would be to compute its signature and compare that signature against that of the official key on a known keyserver, or a known piece of software signed by the key. If they match, you have a valid key that has not been tampered with.

What is my PGP private key? ›

Summary: Pretty Good Privacy (PGP) provides cryptographic privacy and authentication for data communication. To provide this it uses a private and public key set. The public key is used to encrypt documents or verify a signature. The private key is used to decrypt and sign a document.

How do I send my PGP public key? ›

To send your public key to a correspondent you must first export it. The command-line option --export is used to do this. It takes an additional argument identifying the public key to export. As with the --gen-revoke option, either the key ID or any part of the user ID may be used to identify the key to export.

Why is my PGP public key invalid? ›

This error appears if the key is not Signed, or the steps have not yet been taken to "validate" this key is a legitimate key and one that should be used for encryption. To validate the key is legitimate, you can call the person on the phone and ask what their Key ID is.

How do I publish my PGP public key? ›

Select PGP Keys in the control box and click the keyring that contains your key. Right-click on the key you wish to submit, then click Copy Public Key. Open a Web browser and type the following address keyserver.pgp.com. Click the link Publish Your Key.

How do I generate a public private ed25519 key pair? ›

You can generate keys with the 'ssh-keygen' command: $ ssh-keygen -t ed25519 Generating public/private ed25519 key pair. Enter file in which to save the key ($HOME/. ssh/id_ed25519): Enter passphrase (empty for no passphrase): Enter same passphrase again: Your identification has been saved in $HOME/.

How do I send a public key in PGP? ›

Resolution
  1. Click the PGP Tray lock icon in your system tray and then click Open Symantec Encryption Desktop:
  2. Select the All Keys control box and select the keyring that contains the key you wish to email.
  3. Right-click on the desired key, point to Send To, then click Mail Recipient.
Nov 17, 2023

What is a pgp key pair? ›

When you create a PGP key, a keypair having a public key and a private key is generated. You can share the public key with anyone who wishes to send you encrypted messages or files, but the private key must be known only to you and used to decrypt received messages.

Top Articles
Latest Posts
Article information

Author: Nathanial Hackett

Last Updated:

Views: 6558

Rating: 4.1 / 5 (72 voted)

Reviews: 95% of readers found this page helpful

Author information

Name: Nathanial Hackett

Birthday: 1997-10-09

Address: Apt. 935 264 Abshire Canyon, South Nerissachester, NM 01800

Phone: +9752624861224

Job: Forward Technology Assistant

Hobby: Listening to music, Shopping, Vacation, Baton twirling, Flower arranging, Blacksmithing, Do it yourself

Introduction: My name is Nathanial Hackett, I am a lovely, curious, smiling, lively, thoughtful, courageous, lively person who loves writing and wants to share my knowledge and understanding with you.