|
|||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||
| This is a brief and basic tutorial on how to use the freeware version of PGP 8 to verify digitally signed documents, such as an electronic mail message. This is the text-only version. To view the version with images, click here.
1) Go to the PGP Corporation website (http://www.pgp.com/products/freeware/) 2) Review the License Agreement, scroll down to the bottom, and click the box to accept the License Agreement 3) Download the application from the PGP Corporation website by clicking the download button 4) A. If you receive a warning about viewing pages over a secure connection, this is because you are redirected to a secure area of the website. Click OK to continue. B. You may also be redirected back to the standard area of the site, and receive another warning, click the yes button. C. If you receive a warning about being redirected to a new internet site, click the yes button. 5) In the file download box, select save then choose a location for the file and wait for the download to complete. When the download is complete, if the download window remains on the screen, click the close button. 6) In Windows Explorer, navigate to the location where you saved the file. The default name for the file is “PGP802-PF-W”. 7) If you are using Windows XP, unzip the file and then open the installation program named “PGP8”. If you are using a different version of windows, you will need to unzip this file before proceeding. Use a utility like WinZip (www.winzip.com) to unzip the file. 8) On the welcome page of the PGP Installation program, click next. 9) On the License Agreement page, review the text and click yes. 10) On the Read Me page, review the text and click next. 11) On the User Type page, choose “No, I’m a New User” if you do not have a keyring to import. 12) On the Install Directory page, select a destination for where the software should be installed. The default is C:\Program Files\PGP Corporation\... and that should be fine for most people. Click next to continue. 13) On the Select Components page, deselect all options. Although PGP 8 comes with plug-ins to integrate with Outlook, Outlook Express, Eudora and others, these options will not function with the freeware version. WARNING: If you install these additional plug-ins, the software will prompt you to purchase a license to use them. The freeware version does not support these plug-ins. After clearing the checkboxes for all the listed plug-ins, click next. 14) On the Start Copying Files page, click next. 15) On the Setup Status page, wait for the operations to complete. Amuse yourself until the progress bar reaches 100%. 16) On the PGP 8.0.2 install complete page, make sure that the box indicating that you wish to restart your computer is selected and then click finish. 17) Wait while your computer restarts. Retrieve snacks as necessary during this time. 18) After your computer reboots, you will be prompted to enter information in a window titled PGP License Authorization. Click Later 19) At the PGP Key Generation Wizard Wecome page, click next. 20) On the Name and Email Assignment page, enter your name and email address in the boxes provided and then select next. 21) On the Passphrase Assignment page, create a passphrase for use with PGP and enter it into both text boxes. A passphrase is the same as a password and should be something that only you know and should be kept secret. A good passphrase should contain uppercase letters, lowercase letters, numbers, symbols (e.g., ~!@#$%^&*) and be at least eight characters long. When finished, click next. 22) On the Key Generation Progress, wait until the keys are generated and then click next. 23) On the Completing the PGP Key Generation Wizard page, click finish. 24) In order to verify a message you have already received, copy the complete text of the message to the clipboard.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Howdy,
This is a test message for a PGP demonstration.
If the content of this message was altered, the digital signature would be invalidated.
Best Regards,
Seth Martel
-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0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=EAMq
-----END PGP SIGNATURE-----
25) Right click the PGP lock icon in the task bar, select the clipboard menu, then select Decrypt and Verify. 26) If you do not have the PGP public key of the sender of the message on your keyring, PGP will connect to internet key servers to look for it. 27) PGP may prompt you to import the sender’s key to your keyring if it is not already there. 28) PGP will then verify the digital signature and display the results. 29) You may note that PGP has indicated the status as “Good Signature from Invalid Key”. This is because the key used to verify the message is not trusted by you. To change this, right click the PGP lock icon in the task bar and select PGPKeys. 30) Right click the sender’s key and select Sign. 31) In the PGP Sign key window, select the sender’s key and then click OK. 32) You will then be prompted to enter your passphrase. Enter your passphrase and click OK. 33) Note that the circle under Validity turns green to indicate that you trust that key. 34) In order to verify the message a second time, copy the contents of the message to the clipboard. 35) Right click the PGP lock icon in the taskbar, select the clipboard menu, then select Decrypt and Verify. 36) Note the status now indicates “Good Signature” and PGP has verified the message. The End |
©2002 Seth Martel, Manchester Connecticut USA - Legal - Privacy Policy - Site Map