PGP (Pretty Good Privacy) encryption for SFTP sender

From my understanding, the whole point of PGP is to provide an encryption layer above whatever other transport means is in place. This means you wouldn’t want to bake it into your SFTP transfer directly from the application since you wouldn’t be gaining the added benefits of encrypting twice. (The attack surface would still have a single point of failure.)

Hi @Tharindu ,

I haven’t work with PGP but if it uses static encryption keys, easiest method would be to create a java transformer to encrypt the content.

Otherwise, you could write a new sender based on SFTP to use PGP encryption.

Have found some open apis and github examples but hope you’ll already looked into those ;)

Cheers!

Damith

Thanks @dsj and @durette .

Yes, java transformers seems to be logical and easy option but just wondered if anyone has done this before so we have a proof. Anyway, we are currently verifying with the bank to see PGP is mandatory or not and based on that we will decide the next step.

Hi @Tharindu, 

We are in the same situation as you, looking into sending payment files preferably by the SFTP sender but the bank is asking about PGP encryption.

How did it turn out for you? 

BR Andreas 

Tharindu,

I am official IFS Partner (Ahead ERP Consulting). We have a solution for you.
I have implemented the PGP Encryptor as Java transformer. This was done for IFS App 7, so it would have to be uplifted to your version (Apps 9? Apps 10?) and tested.

This was done to integrate IFS with JP Morgan/Chase for supplier (AP) payments using ACH, check or wires.

The way it was done, no one was touching the actual file all the way from IFS to the bank (file generated in IFS, PGP-encrypted by Java transformer, sent via SFTP sender, received by the bank, PGP-decrypted).

We can provide this solution. Let me know if you are interested (mateusz.klos@aheaderp.com).

Mateusz Klos
Partner and Senior Application Architect
Ahead ERP Consulting Inc.
mateusz.klos@aheaderp.com
+1 262 212 2601

Hello

Although this thread was created some time ago, just now I’m finding that some of our customer needs some PGP functionality to use with those documents generated from IFS Cloud (22R2).

Any more recent improvement from the above mentioned approaches? Is a Java Transformer still needed?

Thanks in advance

BR

/Juanma

I am interested on the topic. Any other approaches apart from transformers?

Hi all,

Whe're in the same situation but running version 23R1.

Is there a solution for this type of files with PGP encryption?

Thanks in advance!

Sven

Hi @Tharindu,

Did you found a solution for this? we are having the same request for a client in IFS Cloud version 22R2

Thanks in advance!

Harsha 

Not really. It was decided that customer is the single point of contact for all the integrations so IFS provided the file to customer using standard SFTP and they transferred it to the bank using 3rd party tools.

Hi @mateuszklos 

We are implementing a similar solution to one of our customers and facing an issue where the decryption of the file is failing because of an issue of how the file is getting renamed after the decryption. Did you face any similar issues with your solutions? If so, what was the solution? Thank you. 

Best Regards

Akila