Background

The operations carried out on the Portal may result in a notification sent by email. Some of these emails can be encrypted, to ensure their confidentiality. For this, we will use PGP technology, and the open source software based on this standard, GPG. 

What is PGP?  

PGP (Pretty Good Privacy) is an open source encryption system, commonly used to encrypt sensitive data and files. It is also used to send encrypted emails. It is a public key cryptography system.

Encrypt your emails

Step 1 : Generate a public/private key pair

To generate a key pair, several software are available on the market. You can, for example, use the GPG4win suite which includes different tools to use GPG, and in particular Kleopatra, a graphical interface to manage keys and certificates. 

The important thing is to use the email address attached to your Portal account for key generation.

If you already have keys attached to the email address you use on the Portal, then you can reuse them here.

Step 2 : Enable email encryption on the Portal

• Log in to the Portal (https://leportail.xmco.fr/)
• Go to your profile, available in the top right corner (click on the icon then My account)
• Click the Security tab
• In the section Emailencryption, click on the radio button Enabled
• Enter the public key in the PGPKey field
• Click on the Update button

Be careful, your private key must not be known by anyone else than you !

Step 3 : Configure your email client

Depending on your email client (Outlook, Gmail, Thunderbird, etc.), you will have to give it access to your private key so that it can decrypt the emails from the Portal. 

Each time you receive an email, you will have to enter the password associated with your private key in order to decrypt it. Once you have done this, the emails sent by the Portal will be encrypted. 

When you receive an email from the Portal, you should see a message indicating that the email is encrypted in your email client.