Encryption using SSH in PI 7.31 single stack

[Former Member]

Hi Experts,

The receiver system is generating the public/private key pairs using cuteFTP using by following the screens sequentially attached here.

Step 1:- open cuteFTP Tools --> Global options

Step 2: Select the paths for public & private key pairs, then click on Create identity file. Then they have chosen key type as "RSA".

Step 3: They gave input of pass phrase and click next.

Step 4: Then they gave name to public & private keys and clicked Finish.

They gave key size as 1024 and key type as RSA. More over they selected security type as SSH2 security but not openPGP security .

So can I use the public key generated using these ways SAP PI receiver comm. channel to encrypt the data before pushing to receiver FTP folder?

Here the scenario is drag and drop the xls file generated on application server of ECC and push the encrypted file using public key generated as above to a folder in FTP server form where the bank transfers the file to their servers. Please suggest the ways to do it

Thanks,

Nithin.

[Former Member]

Hi Raghu,

How to encrypt using my key i.e., how to generate the key pairs from PI end?

Thanks,

Nithin.

[sahithi_moparthi]

Hi Nitin,

Please go through below links:

Generating SSH Keys for SFTP Adapters - Type 1 - Process Integration - SCN Wiki

Generating SSH Keys for SFTP Adapters - Type 2 - Process Integration - SCN Wiki

[Former Member]

Hello Nithin,

Refer the links shared by Sathi.

You need deploy private key in PI and share the Publi key to the user to decrypt

[Former Member]

Hi Raghu,

Following the Type 1 link would be sufficient right? Generally using public key we decrypt it right? I mean we ask partner to share the public key and partner decrypts using the private key.

But you say use private key to encrypt it and whereas public key to share with partner.

Also how to call the private key stored in NWA key store in comm. channel?

Thanks,

Nithin.

[sahithi_moparthi]

Hi Nitin,

In Case of Outbound :

PI uses private key to encryprt the messages and sends to client.Client decrypt the message using there private key.

Incase of Inbound:

Client uses there private key to encrypt the messages and sends to PI,We use our private key to decrypt the message.

In Communication channel you have an option to select keystore.Once your keys are stored in NWA,directly it will reflect in the channel.You can select the desired key.

[Former Member]

Hello Nithin,

Get the Public key from SFTP user and upload the same in store,Basis should you help with this activity.

Once it is done mention the same in the PGP Encryption module.Below is the link which Inaki already shared.

PGPEncryption Module: A Simple How to Guide