Create a GPG master key

Alias

Name to uniquely identify this master key.

Purpose

Check the box next to Sign if you want to use this key to sign.

User ID name

Enter the name of the user.

User ID comment (optional)

The comment field is optional but useful as adding a comment may help you identify what the key is used for or tell the end-user more about that master key.

User ID email

Enter the user's email address.

Set user ID as primary

Select this option to designate a specific user ID as the primary ID for this key. If you entered multiple user IDs, then select the desired user ID from the dropdown.

Algorithm

Select RSA, ECDSA, or EdDSA. When you select EdDSA the key curve sets to Ed25519.

Key size/curve

Select 2048, 3072, or 4096.

Category

Select Production or Test.

Storage

Select if the keypair should be generated and stored on HSM or Disk.

Keypair status

Select Online (can be used to sign anytime) or Offline (can only be used to sign during a scheduled release).

Access

Select Open (can be used by any account user) or Restricted (can only be used by specified users or a member of a specified user group.

Keypair validity

Allowed users

For Restricted keypairs, you can specify which users can use the keypair.

Allowed user groups

For Restricted keypairs, you can specify one or more groups that are authorized to use the keypair.

Team

This field displays when teams are enabled.

Select a team that should have access to this keypair.