Encrypted Order Download
From CommerceV3 Docs
CV3 Documentation Resources
COMMERCEV3 PRODUCT IMPORT DOCUMENTATION
Copyright 2009 Color Maria, Inc.,
1. TABLE OF CONTENTS
1. Table of Contents 2. Introduction 3. Download Encryption Tools 4. Create Key Pair 5. Activate Order Encryption I. Update Settings II. Import and Test Keys III. Decrypt Test File 6. Decrypt Orders
2. INTRODUCTION
Encrypting text file order exports with PGP guarantees that sensitive payment information is protected as you download orders. You can find more information about PGP here. Only people with access to the public key and passphrase will be able to decrypt the information. There are many options available to create and use PGP keys including command-line and GUI tools. This document provides an example using GnuPG, a free implementation of PGP, as well as some GUI tools.
3. Download Encryption Tools
Download and install Gpg4win.
4. Create Key Pair
You will need to create a key pair that will be used to encrypt and decrypt order information. The public key will be uploaded to CV3 and the private key will be used to decrypt information. This section describes the process of creating your key pair.
- Open the WinPT program under the "GnuPG for Windows" folder in the Start Menu.
- As you start the application, there should be a wizard that will prompt you to create a new GPG key. Follow the wizard making a note of the passphrase you use as you will need this to decrypt files later on.
- After the key has been created, the public key must be exported for CV3. Do this by selecting the key in the Key Manager and choosing Key->Export from the menu. If the key manager is not already open, you can open it by clicking on the WinPT icon in your system tray.
5. Activate Order Encryption
5.I Update Settings
You are now ready to start encrypting your orders.
- Go to Settings->Options->Order Options and select "yes" to "Would you like us to encrypt order export files with PGP?"
- Open the public key file you exported in the previous step using notepad or another plain text editor. The information in the file should look like this:
-----BEGIN PGP MESSAGE----- Version: GnuPG v1.2.6 (GNU/Linux) hQIOA9DQuzC8MNNdEAf/ZNbgWDOcstb8gu63ru/XBnqw7iCfx3JH8NGXY+ubBWDW AKktOgJ2rEs8SW/bkrSi19jG6ONl+YuNee96AyazLYAweNj40zkOblFa1el3xlQh q8B4+s5RR92cD69jjOSK2d65rwIfvizaeDq3sxooBX1OyLiTRLL3lWxH8eyKfL2M 0cXKO5thiLr9noNr4Axn4dH0dTyJriloAOzLGgBC9Rwc1qw1NzxrMv4OniSxtSnr +drIoD5tqpdMel0OUsIk6N9D2jQOpg8RMCKnYWTXTDlEslMzCKV2I0Jn9TZMPHWI twuYcwXZC5S7ioVShaf6dNCUy1HAtedGDCus4/qIiQgAl2ObSZWg8O+SiZtURgGf bB7/9FUxfslhT0DEkOLzop/Hcuhy/jwpz28yeQqKFuKau1j7VtZuPKeACI5xuPw8 gjGScK1ZNTMkGOBZwxc3yrEBAJuH4+s12+Orkov3f6V7S7lzPPnsw2FnwDfukMyf wOt26rOgPLXzu/dwXclgCM9YwOEbJEgurQXe08JT3UL0e0xbTcSuF8Wv0aRj3/F4 4nC/KMUb0H6RoEpod3Cf/HW9wPoWSk1EkRpftRzE/HBrhGGGd61LD2/3y3mxGvkV tz8y7FuzREpmjAO29m2Vbrx5VRkWB9nfxQp56lIY5Ghfg0iqO0CwEWpf7iVDSR7N 4dJAAXMRXKq065k5X+98o+UyzsVLD/KaMY1IC//TnF2CjMHXmUNT9rp4/nc3SQ9I 28Qslk/CeCdot1io3tjWG1ZZLQ== =lAnc -----END PGP MESSAGE-----
- Select all the text in the file using Edit->Select All and paste that text into the "If so, what is your public PGP key?" text area in the CV3 admin.
- Submit the changes.
5.II Import and Test Keys
Now that your public key has been submitted, you must test the public and private keys before you can begin encrypting orders.
- To test your key, return to Settings->Options->Order Options and select "Test your key".
- Enter a test phrase of your choice and click the "Test" button.
- The encrypted block should look similar to this:
-----BEGIN PGP MESSAGE----- Version: GnuPG v1.2.6 (GNU/Linux) hQIOA9DQuzC8MNNdEAgArW1j21tKfAdVGfApSfH5yPPri6WsCL88+U4cZIYWiIoV 4tsRSZlhPmh03b3pCjYmTm6xa5Xib4GGQz+bCXqbiHo5vNZBBUGe1TvV23mLzM6R XpTs1n98NAwsds4jQfRuRQafsPtHkGgfHoaRfwsWtcYbL4pElLp6/g5JfVn5vW7z rYy1oFJt33aSzyEovWgkK1ssWogRP1v2hJ1HP2D5kjEfB8ZvnBAFZbCHNS77mKWl JzYd5OQrKLFulG0kNJLXL2JeiE+65htPck2JJx2u9eUbZXsVkj5+eeJzSy8y6elA wcgmdbvXmhb2OaSIInNe9QSkgtuR5xaDa84/AMKEEggAi27wkjKj7bXhRcmsPpS7 OKPppqBxxutvrcVfkfqQrELFd75pVYBGPZptXjiCIjDWppUzxBpCo/SiZdiXiLIa 6R9As4qiXaGpgAUQP/1sKWLXAw3kkKlUbsGBeRpVnBWu42dsw2RiRIj7T3s7jKh9 llvHio/hBVCNVhuqe3Q1xc8qZtUDT6G5eFKA8t0/rOkVIFoFHNUlIHw9jpJ8DlXc A5qaql9bKQD4hqlUf6oMI3eYWlADaoFX7sNrHZImEJo3dl7x4L9ORVevkOP3mI0C u0uWBabyIhKSCDShjxgY76RptATjtT40na9WC7BwG7/bLl7Ojq2r4e5qFg+EkDGK F9JPAR6HOUBkWy2X/+5EyCujGHfB2ORru1vrw/k6leJoig/kdQ/TocQZPdUiK+qh lrB4DsqrNOzpXuYNdV1kuMvSaSfujsQh7itl6kzaKc/NHA== =yE2u -----END PGP MESSAGE-----
- Now, you need to test your public key. Copy the encrypted block from the section above and save it in a text file using notepad or another plain text editor.
5.III Decrypt Test File
- Open the WinPT File Manager by right clicking the WinPT icon in the system tray.
- Add the file created above containing the encrypted test phrase to the File Manager by dragging it over or using File->Open.
- Highlight the file in the File Manager and choose File->Decrypt. You will need to choose the location of the decrypted file and enter the passphrase you used when creating the key pair in section 4.
- If the resulting file contains your test phrase then congratulations, you are ready to decrypt orders! Just activate the key in Settings->Options->Order Options to complete the process.
6. Decrypt Orders
You are ready to download and decrypt your orders.
- Download and save encrypted order export files in Orders->Pending.
- Decrypt and save your order file using the same process as decrypting your test phrase file in section 5.III.
