Re: GAM - Decryption Keys

41 views

Skip to first unread message

Jay Lee

unread,

Sep 14, 2016, 3:21:50 PM9/14/16

to Marco Pereira, google-ap...@googlegroups.com

+ GAM Mailing list

On Wed, Sep 14, 2016, 3:09 PM Marco Pereira <ma...@onixnet.com> wrote:

Hi Jaylee,

I have a question in regards to decryption keys and GAM maybe you can confirm my testing.
For off boarding some important accounts we use a combination of GAM and GPG in order to do the following process --> Request Email Export (gam audit export request emailAddress) --> Download Email Export (gam audit export download emailAddress reqNum) --> Decrypt Email Export (gpg command that is long) --> Delete Email Export from Google's servers (gam audit export delete emailAddress).

With the third step where we decrypt this there is a prerequisite that we upload a key to Google via the following commands found at this link. The issue we are having is every time one of our technicians performs the following command below, that technician overwrites the previous technicians decryption key they uploaded.
gpg --export --armor -a "Your Name" | \path\to\gam\gam audit uploadkey
What we figure is that our domain can only have one of these keys uploaded at a time, and we were just trying to confirm our suspicion. I did test, and myself and another person can share this key information successfully. Not sure if you would be able to confirm that a single domain can only have one key uploaded, but if you can that would confirm our theory. If there is any more information I can get you please let me know. Thanks!
Marco Pereira CSS Manager
Direct: (908) 548-5539 | Onix | www.onixnet.com
18519 Detroit Ave, Lakewood, OH 44107