Standard keypairs

Keypair type

Select Static (keypair will remain the same) or Dynamic (keypair will change every time you complete a signature).

Keypair alias

Name to uniquely identify this keypair.

Team

Select a team that should have access to this keypair. You will only see this field if you enable Teams under Account settings.

Keypair profile

Select a keypair profile. If you have selected a team. you will only see keypair profiles allocated to that team.

Algorithm

Select RSA, ECDSA, or EdDSA. When you select EdDSA the key curve sets to Ed25519.

Key size

Select 2048,3072, or 4096.

Keypair category

Select Production or Test.

Keypair storage

Select that the keypair should be generated and stored on HSM or Disk. For public trust, you must select HSM.

Keypair status

Select Online (can be used to sign anytime) or Offline (can only be used to sign during a scheduled release).

Access

Select Open (can be used by any account user) or Restricted (can only be used by specified users or a member of a specified user group.

Allowed users

For Restricted keypairs, you can specify which users can use the keypair.

Allowed user groups

For Restricted keypairs, you can specify one or more groups that are authorized to use the keypair.

Generate certificate

When this box is checked, the keypair will be generated with a corresponding default certificate for the keypair.

Certificate alias

Enter a unique name to identify the certificate.

Certificate profile

Select a certificate profile.

Set as default certificate

Tick this box if you want to set this certificate as the default certificate for the keypair.