How to implement PGP encryption in FTP receiver

[former_member441596]

Hi Team,

I have requirement employee master (IDOC to FTP) scenario..

I am new to PGP encryption...This is first time to implement PGP encryption in SAP PI ...

Please suggest me what is process from scratch onwards?

I read some blogs related PGP encryption and got some information....have implement module parameter....

How to get the Public key ,private key ,Private key password and algorithm....?

Thanks & Regards,

Naidu

[Harish]

Hi Naidu,

First you need to check if the PGP is installed on your system. to check this log into

http://host:port/nwa/sysinfo

then go to component info. Filter the name with *PGP* and check it its available.

then the steps are

1. Generate the PGP keys

2. Store the PGP keys on OS folder

and configure as per the blog given by Raghu.

regards,

Harish

[former_member441596]

Hi Harish,

I have verified the my system ...Http://host:port/nwa/sysinfo...

The PGP add on is already installed....

My question is how to generate the keys..(private ,public key and algorithm)

Please help me how to generate PGP keys..

Thanks & Regards,

Naidu

[former_member186851]

Below link has the details

Generating ASCII Armored PGP Key Pairs - Process Integration - SCN Wiki

[former_member441596]

Hi Raghu ,

I have successfully installed GP4Win and following....as per blog...

Execute run command for Key generation (gpg --gen-key)

i am not getting any keys...

Please suggest me what is process for generating keys..

Thanks & Regards,

Naidu

[former_member441596]

This command executed..

[former_member186851]

That link should have all the details Varri.

[manoj_khavatkopp]

you dont need to execute the command :

Just open the installed Software go to File-->New certificate , then put the required details (in advanced setting you can select RDS / DSA algo) then your keys and provide a password for the private key and your keys will be generated.

To export the key from software to desktop right click on that and you export certificate/secret key.

Br,

Manoj

[former_member441596]

Hi Manoj,

Thanks for your response...

I generated certificate based on above process...like BD2E42202089EE30FF5B24FD7623F29BF75DB60D.asc....

then we uploaded same key into our SAP PI system and getting one error....

SAP NWA -->Key Storage -->trustedCA-->import entry i have done...

Please suggest what is next process after getting certificate.... public certificate also same format(concursolutions.asc)...

i configured module parameters are below...

Thanks & Regards,

Naidu

[former_member186851]

Hello Naidu,

The first link I shared has the details step by step.

[manoj_khavatkopp]

PGP keys are not to be imported in NWA , they need to be imported in OS folder OR they can be imported into B2B toolkit if you have this installed in your system.

you need to place both public and private key together.

[former_member441596]

Hi Manoj,

we have uploaded the both public and privates key in OS level in SAP PI...

We triggered the data and getting error ...

Thanks & Regards,

Naidu

[manoj_khavatkopp]

What is the value for parameter  ownPrivate key .

you should have private key file name configured to this parameter i guess you have kept as public key.

Open the file which you have configured for this parameter in notepad and put the screenshot of the file here.

Additionally you need to configure the password parameter too.

Br,

Manoj

[former_member441596]

I have configured below parameters...

ENC    applyCompression     ZIP

ENC    applyEncryption        true

ENC    applySignature          true

ENC    encryptionAlgo          AES_256

ENC    ownPrivateKey           BD2E42202089EE30FF5B24FD7623F29BF75DB60D.asc

ENC    ownPublickey            concursolutios.asc

ENC    pwdOwnPrivateKey    **** and **

Thanks & Regards,

Naidu

[manoj_khavatkopp]

BD2E42202089EE30FF5B24FD7623F29BF75DB60D.asc this is the public key which you need to share with Third party for decryption.

You need to encrypt using private key , i hope you have imported 2 keys from the tool (secret key and public key )

if you have not imported the secret key from the tool check the screenshot which i provided earlier you have option "Export secret keys.."

So you need to configure the secret key name here.

br,

Manoj

[former_member441596]

Hi Manoj,

I have triggered the data and getting error as below ...

I have done below link related updated JCE policy...

Please suggest help me on this..

Thanks & Regards,

Naidu

[manoj_khavatkopp]

May i know what is the error?

[former_member441596]

[manoj_khavatkopp]

Can you please check if the JCE is updated , if possible provide the screenshot after navigating to URL :http(s)://Host:Port/BC//VerifyJCE

Br,

Manoj

[former_member441596]

Hi Manoj,

Today my basis has responded about JCE policy files updation...

Earlier we are using windows OS and recently migrated to LINUX OS..Now basis team raised a question same procedure for applying JCE policy updation in LINUX OS or any different?

as per link:

B2B Adapters - Updating to JCE Unlimited Strength Jurisdiction Policy

Can you please advise on this?

Thanks & Regards,

Naidu

[manoj_khavatkopp]

I guess this is not OS dependent so it should be same, its just the file updation in the specific location.

br,

Manoj

[former_member186851]

Hello Naidu,

Check the below link