PGP User Guide
A. Install PGP......................................................................................................................1
B. Create your new key and send your public key to HSBC...............................................7
C. Import HSBC Public Key...........................................................................................133
D. Encrypt and send File to HSBC..................................................................................145
In summary, this is how it works:
a. HSBC sends 01 key to you.
b. You use the key received from HSBC to "lock" (encrypt) the file.
c. You send the file to HSBC.
d. Only HSBC authorised staffs, with the corresponding key, can open the file.
The Process:
What you need to do is:
a. Install the software onto your computer.
b. Generate your 02 keys: public and private.
c. Send your public key via email to HSBC. In case HSBC would like to send
you a secured file, HSBC will use your public key to encrypt the file before sending.
d. Import HSBC public key. It is the file "HSBC Securities Services.asc"
attached in the email we sent you.
e. Fill in the excel file "Trade detail template.xls" (attached in the email) with
trading data of client.
f. Encrypt the file "Trade detail template.xls", using the HSBC public key (we
sent you in the email) and signed by your private key (generated at step b).
g. Send the encrypted file "Trade detail template" via email to HSBC.
A. Install PGP
Double click on PGPDesktopWin32-990.exe
Click on English to start the installation
Choose : I accept the license agreement and click on Next
Click on Next
Choose Yes to restart computer
Click on Start \ Programs \ PGP and run PGP Desktop
Click on Next and enter license information
Enter information, then click Next
Choose Use without a license and disable most functionality. Click on Next
Click next
B. Create your new key and send your public key to
HSBC
In User Type window, choose I am a new user and click on Next
Click on Next
Click on Next
Enter the email address you will use to send file to us, then click on Next
Enter Passphrase by your choice, you may check Show Keystrokes to avoid miss typo
Wait until the Key Generation Progress complete and click Next
Click Done.
After this process, a key-pair will be created (a public key and a private key). You can
find them at My Documents\PGP folder (please ignore the backup files)
Important notes:
- Keep your private key secured and also do not share the passphrase
You will send your key to HSBC, so that whenever HSBC need to send file to you.
HSBC will use your key to encrypt the file.
In order to send your key to HSBC, please right click on the key in PGPKey window
Click on Mail Recipient, it will automatically attach your public key and send to us. We
will receive your key and import to our PGP system.
C. Import HSBC Public Key
We will send you a HSBC Public Key. You will import this key to your PGP system
Whenever you send file to us, please use this key to encrypt your file.
To import, double-click on key we send to you.
Click on import, then HSBC Public Key will be imported to your system
After import HSBC key, you can see new record from your PGP Desktop All keys
window.
D. Encrypt and send File to HSBC
Go to file you want to encrypt. Right-click on the file, choose PGP Desktop \ Secure
<File name> with key
PGP will ask you which key you will use to encrypt. Click on Add
Choose HSBC key and click on Add
Click OK
Click on Next
Choose your private key as Signing Key and enter your passphrase. Click on Next
An encrypted will be created. Please attach high light file and send to HSBC via email
If you want to know more about PGP, please go to Start/Programs/Documentation/PGP
Users Guide
E. Decrypt a file received from HSBC
As you are aware above, you need to send your key to HSBC. HSBC will use your key to
encrypt file before sending to you.
When receive an encrypted file sent from HSBC.
Right click on it and choose Decrypt and Verify <File name>
File received after decryption. An log record of the decryption is also created in
Verification History.
