Vendor Payment Manager uses PGP (Pretty Good Privacy) encryption to secure file transfers between NetSuite and your banks. You store the bank's public key and your private key in the General section of the app settings. The app uses these keys automatically when encryption or decryption is enabled on a flow. This article explains the fields and how to enter your keys.
Vendor Payment Manager supports PGP encryption for outgoing accounts payable files and PGP decryption for incoming bank acknowledgment files. Both keys are stored per bank in the General section. A separate set of keys can be stored for each bank in your subscription.
Once saved, the keys are not displayed again. This is by design to protect the security of your PGP credentials.
Before you begin
- Obtain the bank's PGP public key from your bank contact.
- Generate or obtain your organization's PGP private key and passphrase.
- Confirm with your bank which encryption mode is required: plain encryption, or encryption with signature.
PGP field reference
| Field | Description |
|---|---|
| Enter PGP keys for | Select which key you want to enter. Encryption (Bank Public Key) stores the bank's public key, used to encrypt outgoing files. Decryption (NetSuite Private Key) stores your private key, used to decrypt incoming files. The fields that appear below update based on your selection. |
| PGP Public Key | The bank's PGP public key. Required when Encryption (Bank Public Key) is selected. |
| PGP Private Key | Your organization's PGP private key. Required when Decryption (NetSuite Private Key) is selected. |
| PGP Passphrase | The passphrase associated with your PGP private key. Required when Decryption (NetSuite Private Key) is selected. |
Enter PGP keys
- Sign in to your integrator.io account.
- Open the Vendor Payment Manager integration app.
- Go to General settings.
- In the Enter PGP keys for dropdown, select Encryption (Bank Public Key).
- In the PGP Public Key field, paste the bank's public key.
- Select Save.
- In the Enter PGP keys for dropdown, select Decryption (NetSuite Private Key).
- In the PGP Private Key field, paste your private key.
- In the PGP Passphrase field, enter your passphrase.
- Select Save.
The keys are saved and will not be displayed again.
Enable encryption on a flow
Storing PGP keys in the General section makes them available to your flows, but encryption and decryption must be turned on separately in each flow's settings.
- To enable encryption for a NetSuite to Bank flow, see the Encrypt file with PGP Key and Sign Encrypted files settings in Configure a NetSuite to Bank file transfer.
- To enable decryption for a Bank to NetSuite flow, see the Decrypt file with PGP Key after transfer setting in Configure a Bank to NetSuite file transfer.
Limitations
- Encryption is not supported for saved search flows.
- Decryption is not supported for files that are both encrypted and signed by the bank.
- Each bank in your subscription stores its own set of PGP keys.
- Vendor Payment Manager doesn’t accept PGP signatures that use the SHA-1, MD5, or RIPEMD-160 hash algorithm, including a bank signing key whose certification uses one of them. Ask your bank to sign files with SHA-256 or stronger.