Create a GPG master key

Alias

Name to uniquely identify this master key.

Purpose

Select Sign to use this key to sign.

Name

Enter the name of the user.

Comment (optional)

A comment can help you identify the key's purpose or help end users understand more about the master key.

Email

Enter the user's email address.

Set user ID as primary

Select this option to designate a specific user ID as the primary ID for this key. If you entered multiple user IDs, then select the desired user ID from the dropdown.

Algorithm

Select RSA, ECDSA, or EdDSA. When you select EdDSA the key curve sets to Ed25519.

Key size/curve

Select 2048, 3072, or 4096.

Category

Select Production or Test.

Storage

Select if the keypair should be generated and stored on HSM or Disk.

Keypair status

Select Online (can be used to sign anytime) or Offline (can be used to sign during a scheduled release).

Access

Select Open to allow access to any account user. Select Restricted  to limit access to specified users or a member of a specified user group.

Keypair validity

Allowed users

For Restricted keypairs, you can specify which users can use the keypair.

Allowed user groups

For Restricted keypairs, you can specify one or more groups that are authorized to use the keypair.

Team

This field appears when teams are enabled.

Select a team that should have access to this keypair.