You are on page 1of 20

PGP User Guide

A. Install PGP......................................................................................................................1
B. Create your new key and send your public key to HSBC...............................................7
C. Import HSBC Public Key...........................................................................................133
D. Encrypt and send File to HSBC..................................................................................145

In summary, this is how it works:


a. HSBC sends 01 key to you.
b. You use the key received from HSBC to "lock" (encrypt) the file.
c. You send the file to HSBC.
d. Only HSBC authorised staffs, with the corresponding key, can open the file.

The Process:

What you need to do is:


a. Install the software onto your computer.
b. Generate your 02 keys: public and private.
c. Send your public key via email to HSBC. In case HSBC would like to send
you a secured file, HSBC will use your public key to encrypt the file before sending.
d. Import HSBC public key. It is the file "HSBC Securities Services.asc"
attached in the email we sent you.
e. Fill in the excel file "Trade detail template.xls" (attached in the email) with
trading data of client.
f. Encrypt the file "Trade detail template.xls", using the HSBC public key (we
sent you in the email) and signed by your private key (generated at step b).
g. Send the encrypted file "Trade detail template" via email to HSBC.

A. Install PGP
Double click on PGPDesktopWin32-990.exe

Click on English to start the installation

Choose : I accept the license agreement and click on Next

Click on Next

Choose Yes to restart computer

Click on Start \ Programs \ PGP and run PGP Desktop

Click on Next and enter license information

Enter information, then click Next

Choose Use without a license and disable most functionality. Click on Next

Click next

B. Create your new key and send your public key to


HSBC
In User Type window, choose I am a new user and click on Next

Click on Next

Click on Next

Enter the email address you will use to send file to us, then click on Next

Enter Passphrase by your choice, you may check Show Keystrokes to avoid miss typo

Wait until the Key Generation Progress complete and click Next

Click Done.

After this process, a key-pair will be created (a public key and a private key). You can
find them at My Documents\PGP folder (please ignore the backup files)

Important notes:
- Keep your private key secured and also do not share the passphrase
You will send your key to HSBC, so that whenever HSBC need to send file to you.
HSBC will use your key to encrypt the file.
In order to send your key to HSBC, please right click on the key in PGPKey window

Click on Mail Recipient, it will automatically attach your public key and send to us. We
will receive your key and import to our PGP system.

C. Import HSBC Public Key


We will send you a HSBC Public Key. You will import this key to your PGP system
Whenever you send file to us, please use this key to encrypt your file.
To import, double-click on key we send to you.
Click on import, then HSBC Public Key will be imported to your system

After import HSBC key, you can see new record from your PGP Desktop All keys
window.

D. Encrypt and send File to HSBC


Go to file you want to encrypt. Right-click on the file, choose PGP Desktop \ Secure
<File name> with key

PGP will ask you which key you will use to encrypt. Click on Add

Choose HSBC key and click on Add

Click OK

Click on Next

Choose your private key as Signing Key and enter your passphrase. Click on Next

An encrypted will be created. Please attach high light file and send to HSBC via email

If you want to know more about PGP, please go to Start/Programs/Documentation/PGP


Users Guide

E. Decrypt a file received from HSBC


As you are aware above, you need to send your key to HSBC. HSBC will use your key to
encrypt file before sending to you.
When receive an encrypted file sent from HSBC.
Right click on it and choose Decrypt and Verify <File name>

File received after decryption. An log record of the decryption is also created in
Verification History.