Endpoint Encryption

 View Only
  • 1.  Can Prod Private&Public Key be used in DR

    Posted May 18, 2011 08:20 PM

    Hi

    we have a PROD envt , DR envt. PGP installed both in DR & PROD.

    Can I download the private & public key from PROD and use it in DR ? Is the private key bound to the Server/IP ? we have a # of files sent to multiple vendors. If I generate a new Private key in DR , that needs to be sent out to the vendors. Instead can I use the keys from PROD in DR ? Would that work?

    Thanks



  • 2.  RE: Can Prod Private&Public Key be used in DR

    Posted May 18, 2011 11:10 PM

    You can export your keys from your production environment and import them into your DR environment.  Or, you can copy your keyring files, and use them as the keyring files in your DR environment.

    If you export your keys, be sure to export the key pairs and not just the public keys.  



  • 3.  RE: Can Prod Private&Public Key be used in DR

    Posted May 19, 2011 02:49 PM

    So, though I have a different installation, I still could use the private key from my Production in DR ?

    Since I have already generated a key pair in DR and it is in the keyring, should I delete it and add the PROD keypair or can I have both DR and Prod keypair and PGP knows what to use to decrypt/encrypt?

    Thanks



  • 4.  RE: Can Prod Private&Public Key be used in DR
    Best Answer

    Posted May 19, 2011 06:07 PM

    If you are never going to use the key you created in your DR environment, you may as well just delete it.

    OpenPGP files include the Key ID of the recipient key, so PGP Command Line will know which key to use to decrypt.  But you don't want to encounter any ambiguity about which key to sign with, or accidentally send someone the wrong key, especially if they have the same User IDs.