You are here:
Use a Created Key with File Transfer Activities
You can configure your file transfer activities in Automation Studio to use either a generated encryption key or an RSA private key you create and supply to Marketing Cloud Engagement. Use this key as part of the process to decrypt a file from an Engagement FTP site and save the contents to a safehouse location. This activity prepares the data for a file import activity. You can also use the key as part of the process to encrypt a file from a safehouse location and save that data to an Engagement file location. That data is saved in preparation for secure data export.
PGP or GPG decryption and encryption are supported. You can use several different software suites to generate an unsigned 4096-bit RSA Key Pair in the .ASC file format. After you generate the public and private key pair, follow these steps to upload the appropriate key to Key Management. After creating the key, choose the appropriate key from the dropdown when creating the File Transfer activity.
Decrypt Files Uploaded to Engagement
Upload the RSA Private Key to Marketing Cloud Engagement Key Management. Use the corresponding public key to encrypt the file with PGP or GPG encryption before uploading the .pgp or .gpg file to Engagement SFTP servers or a file location. Create a File Transfer Activity in Automation Studio, select Manage File, select Decrypt File, and choose the appropriate key from the dropdown on the file transfer activity creation screen.
Encrypt Files Transferred from Safehouse to SFTP
Upload the RSA Public Key to Marketing Cloud Engagement Key Management. Create a File Transfer Activity in Automation Studio, select Move a File from Safehouse, then select Encrypt File and either the GPG or PGP option. Select your public key and continue with the activity creation process. After downloading the file with an SFTP client, use the corresponding private key to decrypt the encrypted file.
Key Rotation
We recommend rotating your keys regularly. Add a filename prefix or suffix to indicate the key used for encryption or decryption. Use a file pattern definition with the file trigger for the Automation and File Transfer activity to select the appropriate key for decryption.
