Data Encryption Utrecht Sequencing Facility
Safeguarding privacy and integrety or your data!
0: Installing gpg
1: Creating a keypair
In this step you’ll create a public and private keypair.
Run the command :
gpg ––gen-key
- Choose key type 2 (DSA and ElGamal).
- Set key size to 2048 bits.
- Choose an expiry date (Note : When expired you’ll have to create a new keypair and send it to us (See ‘3 : Export your public key’) ).
- Please provide a user ID in addition to the key parameters. Please make sure the name and the email are the same as your USEQ username (the one used during sample submission) and email.
- Protect your keypair with a passphrase (Important : Create a long passphrase using a combination of alphabetic and non-alphabetic characters).
2 : Exporting your public key
In this step you will export your public key and share it with us.
Run the command :
gpg ––output name_of_my_key.gpg ––armor ––export key_identifier
- Replace ‘name_of_my_key’ with a sensible name for your public key. As key_identifier, again, use the email you provided in step 1.
- Email the public key file to useq@umcutrecht.nl. We will contact you as soon as possible to verify your key.
3 : Importing our public key
During this step you’ll import our public key. This key is used by GnuPG to verify us as the actual source of the data. You will execute this step as soon as we contact you to verify your public key.
Download our key and run the command :
gpg ––import usf_key.gpg
This imports our public key
Run the command :
gpg ––list-keys
Our key should now be in the list produced by this command(look for useq@umcutrecht.nl).
Run the command :
gpg ––edit-key useq@umcutrecht.nl
- Run the command ‘fpr’, check if the fingerprint matches the one we provide you.
- Run the command ‘sign’ to verify the fingerprint if the fingerprint is correct.
4 : Decrypting data
We use your public key to encrypt your sequencing data so only you (and anyone with access to your private key) will be able to decrypt the data. As soon as you’ve followed all the above steps you’re ready to decrypt any encrypted file we send you. Important : Make sure you have enough disk space (minimally twice the size of RUNID.gpg) on the disk you’re writing RUNID.tar.gz to. Also network drives are known to cause issues during decryption, so when possible try to read/write from a local disk.
To decrypt the data, run the command :
gpg ––output RUNID.tar.gz ––decrypt RUN.gpg
0: Installing Gpg4win
1: Creating a keypair
In this step you’ll create a public and private keypair.
- Open Kleopatra and click on File -> New Key Pair. Select ‘Create a personal OpenPGP key pair’.
- Enter your personal details and make sure the email and the name are the same as your USEQ username (the one used during sample submission) and email.
- In ‘Advanced Settings’ in the section ‘Key Material’ select ‘DSA’ with default keysize of 2048 bits. Choose an expiry date under ‘Certificate Usage’ (Note : When expired you’ll have to create a new key pair and send it to us (See ‘3 : Export your public key’) ).
- Click ‘Next’ followed by ‘Create’, a popup will appear and you’ll have to enter a secure passphrase (Important : Create a long passphrase using a combination of alphabetic and non-alphabetic characters).
- When the popup saying ‘Key Pair Succesfully Created’ appears Click ‘Finish’. In the Kleopatra main window you’ll now see the key pair you just created together with all it’s details.
2 : Exporting your public key
In this step you will export your public key and share it with us.
- In Kleopatra right click your key and select ‘Export’, save the public key file with a sensible name. Important : Do not export / share your private/secret key with us.
- Email the public key file to useq@umcutrecht.nl. We will contact you as soon as possible to verify your key.
3 : Importing our public key
During this step you’ll import our public key. This key is used by GnuPG to verify us as the actual source of the data. You will execute this step as soon as we contact you to verify your public key.
- Download the key and in Kleopatra select ‘Import’. In the file browser, find the key you just downloaded, select it and click ‘Open’.
- A popup will appear asking you to certify the key you just imported. Click ‘Yes’.
- In the following menu select our key, check if the fingerprint matches the one we send together with the public key file. If it does select ‘I have verified the fingerprint’ and click ‘Next’.
- In the next window select ‘Certify only for myself’ and click ‘Certify’.
- A popup will appear asking you to enter the passphrase to the key pair you created in step 1. Enter the passphrase, click ‘Ok’ followed by ‘Finish’.
4 : Decrypting data
We use your public key to encrypt your sequencing data so only you (and anyone with access to your private key) will be able to decrypt the data. As soon as you’ve followed all the above steps you’re ready to decrypt any encrypted file we send you. Important : Make sure you have enough disk space (minimally twice the size of RUNID.gpg) on the disk you’re writing the decrypted file to and enough space on the C: drive (also, minimally t. Also, network drives are known to cause issues during decryption, so when possible try to read/write from a local disk.
- In Kleopatra select File -> Decrypt/Verify Files.
- Open the file you want to decrypt, select an output folder and click ‘Decrypt/Verify’.
- If asked, enter the passphrase belonging to your key.
0 : Installing GPG Suite
1 : Creating a keypair
- In this step you’ll create a public and private keypair. Open GPG Keychain and click the ‘New’ button.
- Enter your name and email address. Make sure name and the email address are the same as your USEQ username (the one used during sample submission) and email.
- Under ‘Advanced options’ set the ‘Key type’ to ‘DSA and Elgamal’ and ‘Length’ to 2048. Choose an expiry date (Note : When expired you’ll have to create a new keypair and send it to us (See ‘3 : Export your public key’) ).
- Protect your keypair with a passphrase (Important : Create a long passphrase using a combination of alphabetic and non-alphabetic characters).
- Click ‘Generate key’. When asked to upload your public key, click ‘No Thanks!’. In the GPG Keychain main window you’ll now see the key you just generated.
2 : Exporting your public key
In this step you will export your public key and share it with us.
- In GPG Keychain select your key and click ‘Export’. Choose a sensible name for your public key and click ‘Save’. Important : Do not include the secret key in the export!
- Email the public key file to useq@umcutrecht.nl. We will contact you as soon as possible to verify your key.
3 : Importing our public key
During this step you’ll import our public key. This key is used by GnuPG to verify us as the actual source of the data. You will execute this step as soon as we contact you to verify your public key.
- Download our public key and in GPG Keychain click ‘Import’, select our public key and click ‘Open’.
- Check if the Fingerprint matches the one we provide you. If it does right click our public key and select ‘Sign’.
- In the next popup window do not select ‘Publish’ , but instead click ‘Sign’. You will be asked to enter the passphrase of the key pair you generated in step 1, after entering this click ‘OK’.
4 : Decrypting data
We use your public key to encrypt your sequencing data so only you (and anyone with access to your private key) will be able to decrypt the data. As soon as you’ve followed all the above steps you’re ready to decrypt any encrypted file we send you. Important : Make sure you have enough disk space (minimally twice the size of RUNID.gpg) on the disk you’re writing the output file to. Also network drives are known to cause issues during decryption, so when possible try to read/write from a local disk.
- Right click the encrypted file, Services -> OpenPGP: Decrypt File and enter the passphrase belonging to your keypair.