Skip to main content
Tesouro encrypts your files before publishing them to the SFTP location, so you will need a PGP key pair to decrypt the files.

​
Steps for generating a PGP key pair

  1. Choose the following algorithm and key size:
    • Algorithm: RSA
    • Key Size: 4096 bits
  2. Securely store the private key and employ it for decrypting files received from Tesouro, as well as for verifying the signature of webhook requests.
  3. Coordinate to securely send the public key to Tesouro. Tesouro will use the public key to encrypt the report file and sign the message sent to the webhook endpoint.
Please note that you would need to regenerate a new key pair before the current key pair expires to ensure that the communication between Tesouro’s servers and yours are always secure.