Skip to main content

Create GPG master key

A master key can technically be used to sign without a need for a subkey. However, we recommend that you only use the master key (sometimes called “certification key”) to certify and create subkeys.

You can generate a master and subkey from DigiCert​​®​​ Software Trust Manager or our command line interface SMCTL.

You require the Manage master key permission to generate a GPG master key.

Note

What is a User ID (UID)?

UIDs are assigned to the master key. They are used to identify your GPG key.

UID format

Name (Comment) <email>

UID examples

  • John Doe (Signing) john.doe@example.com

  • Jane Doe jane.doe@example.com

Tip

UIDs are shown in some GnuPG operations. Select a name, email address, and comment that are both professional and commonly used for PGP-protected communication, for example your company email address or one you use for signing off on project commits.