Installing PGP

[Getting PGP | Installing PGP | Using PGP]

Once you have found PGP on your machine, or received your purchased copy of it, you will need to install it. To do so, first close down all running programs. Then, in Windows 95-98, click on the Start button and select "Run", then push the "Browse" button. If you're installing from a CD, double click the "My Computer" icon and then your CD-ROM drive. The file you're looking for is called "Setup" or "Setup.exe". Select that file to run, and then press the "OK" button. If you're installing from some other directory on your machine, you will need to find that directory. Once there, find the "Setup" or "Setup.exe" file, and run it. This will start the installation.

The installation should begin with a licensing agreement. Once you have read through the agreement, it will then ask you what directory it should install to. The default is likely C:\Program Files\Network Associates\PGP. If you would prefer a different directory, choose "Browse" and select a different directory. After you are satisfied with the directory, press "OK". It will then ask you to select which network components you would like to install. You should leave all the boxes checked, and press the "Next" button. The next screen displays all your installation settings. If these settings are correct, press "Next". If they are not correct, press "Back" and correct the settings. After you accept the settings, the installation will begin. Please be patient, this may take several minutes.

Following the installation, it should ask you if you have any existing keyrings, to which you should say no. The next screen will give you the option to view the readme file now. You should take a few minutes to familiarize yourself with the contents of the readme file. After viewing the readme file, your computer should prompt you to restart.

Generating a Key Pair

After restarting your computer, you should notice a new icon on your taskbar, probably on the right side, that looks like a little padlock. If you don't see a new icon on your taskbar, go to the directory where PGP has been installed and "Launch PGPtray". Click on the padlock icon, and select the "PGPtools" option. This should bring up the following window with several buttons:

Press the button on the far left. That should bring up the PGP Keys window. The first time you use the PGP Keys window, it should launch the Key Generation Wizard, to help guide you through generating a key pair.

On the first screen of the Key Generation Wizard, read the information and then click "Next". On the next screen, enter your name and e-mail address as you want it to appear, then click "Next". This screen prompts you for the strength of the encryption. You should select 2048 bits, then click "Next." The next screen asks you for an expiration date for your keys. It is not recommended to add an expiration date because although your private key will still be useable, no-one will be able to send you new messages using that key. Select an expiration date (again, not recommended) or "Never Expires" and click "Next." This screen will prompt you for your passphrase. Your passphrase should contain some non-alphabetical characters, and be at least 8 characters long. When you have entered in your passphrase twice, click "Next". On the next screen, PGP will ask you for some random data. Move your mouse around randomly until the percentage bar fills up to 100%. Then click "Next". PGP will now begin generating your key pair. Please be patient. After PGP has generated your key pair, it will ask you if you'd like to send your key to the server. Say no for now, as you haven't assigned your key to a publically available server (for more information about publically available servers, please refer to your PGP manual). Then read the last screen and click "Finish".

*Note: You must install PGP on the computer used to read your Web site's e-mail. You will be using PGP to decrypt e-mails from online order forms and/or shopping carts. (For an example of a Frontier Total Web Shopping Cart, click here.)

Backup your Keys!

If you lose your Private Key for any reason, you will not be able to decrypt your e-mail without these backups. We cannot read any of the transactions your Web site handles, and cannot help you to recover any messages which you cannot decrypt. If you lose the ability to decrypt messages from your Web site, you must contact your Fulfillment Representative immediately. We will disable the transaction capabilities of your site until a resolution to the problem is found. This is to ensure that you do not receive any transactions that you will not be able to read. Usually a fix can be found within a couple of hours. Any messages encrypted with an unusable Key Pair cannot be recovered. The NSA has estimated it would take all of the personal computers in the world today (that is 260 million PCs) working for 12 million times the age of the universe to crack a single PGP-encrypted message. (Source, www.eudora.com.) We cannot retrieve messages you have lost either; we do not keep your transactions for any period of time.

Reminder: Make backup copies of your Public and Private Keys, and keep them in a safe place.

Send your Fulfillment Representative the Public Key

After generating the key pair, you will want to make your public key available to your Fulfillment Representative. During installation, PGP may ask if you would like to send your Public Key to a Key Server. Key Servers are depositories of thousands of peoples' Public Keys. It is a good idea to send your Public Key to a Keyserver; this way, your friends and business associates can easily find and use your Key. We have a Key Server which we use to store Public Keys. To add your key to our server, from the "Edit" pull-down menu, choose "Copy". You will then "Paste" the copy of the public key in an e-mail and send it to contactus@frontiertotalweb.com. Read the last screen and click "Finish". Once we have received your public key, we will add it to our "key ring." You then will receive an encrypted message from your Fulfillment Representative to test the PGP key.

Emergency Help!

If you lose the ability to decrypt messages from your Web site, you must contact your Fulfillment Representative immediately! We will disable the transaction capabilities of your site until a solution to the problem is found.

Note: When you have created your Key Pair, you must e-mail your Public Key to your Fulfillment Representative at: contactus@frontiertotalweb.com.

Important!

You should never send your Private Key to anyone. We will NEVER ask you for your Private Key or Passphrase. If someone asks you for your Private Key or Passphrase, please contact your Fulfillment Representative immediately.

Test PGP

Once we have installed your security information on our servers, we will contact you with a test e-mail message that is encrypted with your Key. We do this to guarantee that we have the correct Key installed, and that you understand the process needed to retrieve and decrypt mail from our servers. Please respond to the message once you successfully decrypt it, and we will make the final modifications to your site to enable transaction handling.

Important things to remember

• Make backup copies of Public and Private Keys, and keep these in a safe place.
• Do not forget your Passphrase - we can't crack your encryption.
• Never tell anyone your passphrase.
• Never send your Private Key to anyone.
• If your computer is accessible to untrusted persons, leave your secure mail encrypted.
• If you lose the ability to decrypt messages, contact your Fulfillment Representative immediately.

Any additional questions can be e-mailed to contactus@frontiertotalweb.com, or call us at (877) WEB-5254 or (877) 932-5254.

[Getting PGP | Installing PGP | Using PGP]