Create a GPG subkey

Alias

Name to uniquely identify this subkey.

Select master key

Select the master key that this subkey should be associated with.

Algorithm

Select RSA, ECDSA, or EdDSA. When you select EdDSA the key curve sets to Ed25519.

Key size/curve

Select 2048, 3072, or 4096.

Category

Select Production or Test.

Storage

Select if the keypair should be generated and stored on HSM or Disk.

Keypair status

Select Online (can be used to sign anytime) or Offline (can only be used to sign during a scheduled release).

Access

Select Open (can be used by any account user) or Restricted (can only be used by specified users or a member of a specified user group.

Keypair validity

Allowed users

For Restricted keypairs, you can specify which users can use the keypair.

Allowed user groups

For Restricted keypairs, you can specify one or more groups that are authorized to use the keypair.

Team

This field displays when teams are enabled.

Select a team that should have access to this keypair.