Automate MFT does not generate keys or certificates. Keys and certificates must be created externally, using tools like ssh-keygen, openssl, or PGP utilities such as OpenPGP, Gpg4win, or Kleopatra, and then imported into Automate MFT.

Keys and certificates are managed from the Library > Keys + Certs screen.

Add a key or certificate

  1. Click Add Key or Certificate, and select the key or certificate type from the drop-down menu.
  2. Provide a unique name for the key or certificate.
  3. Add key or certificate-specific information:
    1. PGP Public Key: Click Upload to select your PGP public key file from your system, typically .asc, .pgp, .gpg, .key, or .pub.
    2. PGP Private Key: Click Upload to select your PGP private key file from your system. Enter the Passphrase if your private key is protected.
    3. SSH Private Key: Click Upload to select your SSH private key file from your system, typically .pub, .pem, or .ppk. Enter the Passphrase if your SSH key is protected.
    4. TLS Client Certificate: Click Upload to select your TLS client certificate file from your system, typically .crt, .cer, .der, .key .pem .pfx, or .p12. Enter the Passphrase if the certificate file is encrypted.

    Files without extensions are also permitted. Files with executable extensions or other unsupported formats are blocked.

  4. (Optional) Add a Description to identify the purpose or scope.
  5. Click Save.

Export a key or certificate

  1. Locate the key or certificate in the list.
  2. Click the more options icon () followed by Export. The key or certificate is exported to your browser’s default downloads location.

Delete a key or certificate

  1. Locate the key or certificate in the list.
  2. Click the more options icon () followed by Delete.
  3. Click Delete to move the key or certificate to the Recycle Bin.

Edit a key or certificate

  1. Select a key or certificate from the list. Double-click or click the edit icon ().
  2. Edit the key or certificate details.
  3. Click Save.