Regarding the encryption key gpg enabled on system

[Narendra Uttekar]

Hi,
I want to know how we can tranfer the encryption key generated by gpg to other system. Becuase i am having the gpg key genearted locally as well as received from other external clients. We are having the DR setup for this server. And want to know how we can tranfer the keys,so that even if the original server fails so that other server can function seamlessely regenarting the gpg keys. Do i need to take the ignite of that server and restore to other server in DR setup?Please let me know the best solution for this.Thanks

[Matti_Kurkela · Accepted solution]

By default, GPG stores the keys in keyring files in the .gnupg subdirectory of the user's home directory. If necessary, you can use gpg options to make it store the keys to some other location. See gpg documentation for more details.

Just copy the ~/.gnupg directory to the appropriate home directory on the DR server.

Make sure that the file ownerships are correct after the copy: the keyring file that contains the secret keys (~/.gnupg/secring.gpg) must always have chmod 600 protection, so if it is not owned by the correct user, gpg cannot access the keys.

MK

[Narendra Uttekar]

Thanks for the solution.