Keys and certificates can be created externally, using tools like ssh-keygen, openssl, or PGP utilities such as OpenPGP, Gpg4win, or Kleopatra, and then imported into Automate MFT. You can also generate keys and certificates directly within Automate MFT.

Keys and certificates are managed from the Library > Keys + Certs screen.

Import a key or certificate

  1. Click Import, and select the key or certificate type from the drop-down menu.
  2. Provide a unique name for the key or certificate.
  3. Add key or certificate-specific information:
    1. PGP Public Key: Click Upload to select your PGP public key file from your system, typically .asc, .pgp, .gpg, .key, or .pub.
    2. PGP Private Key: Click Upload to select your PGP private key file from your system. Enter the Passphrase if your private key is protected.
    3. SSH Private Key: Click Upload to select your SSH private key file from your system, typically .pub, .pem, or .ppk. Enter the Passphrase if your SSH key is protected.
    4. TLS Client Certificate: Click Upload to select your TLS client certificate file from your system, typically .crt, .cer, .der, .key .pem .pfx, or .p12. Enter the Passphrase if the certificate file is encrypted.

    Files without extensions are also permitted. Files with executable extensions or other unsupported formats are blocked.

  4. (Optional) Add a Description to identify the purpose or scope.
  5. Click Save.

Generate a key or certificate

  1. Click Generate, and select the key or certificate type from the drop-down menu.
  2. Provide a unique name for the key or certificate.
  3. (Optional) Add a Description to identify the purpose or scope.
  4. Select a Type. Available options vary by key or certificate type. Depending on the selected type, available options may include RSA, ECDSA, or Ed25519
  5. Select a Size, options vary depending on the Type selected above.
  6. Add key or certificate-specific information:
    1. TLS Client Certificate: Add an Expiration Date. You can also click More Options to add an associated Email, Country, City, State, Organization, or Organization Unit.
    2. PGP Private Key: Add an Email, Expiration Date, and select a Hash Algorithm from the drop-down menu. Options include SHA-256, SHA-384, and SHA-512.
  7. (Optional) Enter a Passphrase to protect your key or certificate.
  8. Click Generate and Save.

Export a key or certificate

  1. Locate the key or certificate in the list.
  2. Click the more options icon () followed by Export. The key or certificate is exported to your browser’s default downloads location.

Delete a key or certificate

  1. Locate the key or certificate in the list.
  2. Click the more options icon () followed by Delete.
  3. Click Delete to move the key or certificate to the Recycle Bin.

Edit a key or certificate

  1. Select a key or certificate from the list. Double-click or click the edit icon ().
  2. Edit the key or certificate details.
  3. Click Save.