Data Encryption

CNM supports the OpenPGP encryption standard. Two popular software packages that comply with OpenPGP are PGP (from PGP Corporation) and GnuPG (Gnu Privacy Guard or GPG). In addition there are many other less-common packages that implement OpenPGP. OpenPGP is a public key encryption methodology that requires the exchange of public keys. Therefore, some minor setup is required before files can be encrypted.

Setup
Some simple tasks must be performed before encrypted files can be exchanged:

1. You must send a copy of your public key to CNM. (preferably in ASCII armoured format). This can be done via email to your account manager or via CD to
   CNM Limited, Bullring House, 23 Northgate, Wakefield WF1 3BJ.
   Alternatively, if your key is available from a public keyserver please send details to your account manager.
2. Please fax a copy of your public key's fingerprint to 01924 888701.
3. CNM will import your public key and verify that the signature matches.
4. You must obtain CNM's public key. This may be found on CNM's website at www.cnm.co.uk/encryption/public_key.asc Note that this key is in ASCII "armoured" format. If you prefer we can email the public key to you or send it on CD-ROM.
5. Please verify that our public key has the following fingerprint:
   BB49 21B4 7211 9510 E78E
   BF7D 5688 5B8B C72D DAB7
   

It should now be possible to exchange encrypted files. It is generally wise to perform a test prior to using encryption in a live environment. Please encrypt a small text file and send to your account manager with a subject line of "Encryption Test". CNM will attempt to decrypt the file and will then encrypt it and return it to the sender.