Guide for existing users of PGP Desktop This guide is designed to assist new users with the configuration of PGP Desktop and with migrating from Web Messenger to PGP Desktop. It is assumed that you have a good working knowledge of PGP Desktop and the basic principles behind email encryption. You should also know how to store, verify, and trust keys to be able to encrypt mail. If you are already communicating securely with a Nationwide contact, you will be currently encrypting your email to a Nationwide public key. With the new encryption system, each contact at Nationwide will have a public key. You will need to encrypt the email to your Nationwide contact’s public key.

Follow the steps below to locate and download the public key of your Nationwide contact. Step 1 Browse to https://securemail.nationwide.co.uk/vkd You will be presented with a screen as shown here.

Step 2 Enter the email address of your Nationwide contact and press the Search button. On the screen that appears opposite, enter the verification code that is displayed (an example is shown on the right), then click Submit.

-1-

Guide for existing users of PGP Desktop Step 3 The contact you have searched for will be displayed - as in the example shown on the right.

Step 4 Click the Download button. If you are prompted to save the file: Save the .asc file to a location on your PC. Once the file has been saved, double-click it: PGP Desktop will ask if you want to import the public key. If you are prompted to either open or save the file: Select Open, upon which PGP Desktop will ask if you want to import the public key.

This completes the process of downloading a single Nationwide contacts public key. However, if you wish to automatically search the Nationwide server for public keys, proceed to Step 5.

-2-

Guide for existing users of PGP Desktop Step 5 (Optional) To be able to add individual keys to your keyring you can search Nationwide's keyserver by adding to your standard key server search criteria.

From within your PGPkeys application pull down the Tools Menu, PGP Options menu and select the ‘Edit Keyserver’ button.

-3-

Guide for existing users of PGP Desktop Step 6 You will see a list of existing keyserver's, select the ‘Add’ button to add a new keyserver.

You may add “keys.nationwide.co.uk” and press OK.

Step 7 Back on the Options screen, make sure that “Save keys to my keyring” is selected under the “When keys are found:” drop down menu.

Once this server has been added you can search for Keys for the Domain you normally communicate with, download specified keys for people you normally communicate with, verify and sign the keys as you wish.

-4-

Guide for existing users of PGP Desktop Uploading your public key If you have not communicated securely before via an encrypted email with a Nationwide contact, you will need to have downloaded the public key of your Nationwide contact, and you must also UPLOAD your public key to the Nationwide secure email system.

Follow the steps below to locate your public key and upload it to the Nationwide server. Step 1 Browse to: https://securemail.nationwide.co.uk/vkd You will be presented with a search screen like that shown here.

Step 2 Click on the Publish Your Key icon You will be presented with a screen similar to the one opposite to browse and upload your public key.

Alternatively, if you have the raw public key block, you can click the Key Block button, paste in the public key block and click Upload.

-5-

Guide for existing users of PGP Desktop Migrating from Web Messenger to a PGP Desktop encryption solution If you are already a Web Messenger user and have recently acquired a PGP Desktop email encryption solution, you should change the method by which you secure your email communications with Nationwide by following the simple steps below.

Step 1 Log on to your Web Messenger account and select the Settings button.

Step 2 This will take you to the Future Message Delivery Options box as shown. The dialog box prompts you to select the method by which you will secure your email communications select the option PGP Desktop or S/MIME. Having selected PGP Desktop, click the Choose Option button.

Step 3 The next screen will present you with a dialog box that you can use to paste in your existing public key. Before continuing, you will need to export your existing PGP key from your PGP Desktop software.

-6-

Guide for existing users of PGP Desktop Step 4 Right click on the PGP padlock icon, which should be in your system tray. From the menu, select PGPkeys.

Step 5 Once your PGPkeys application has loaded, locate your key in the list of keys on your local key ring, and right-click on it.

Select Export from the drop down menu.

Step 6 In the next Windows dialog box, select a location to save the key file to, and then click Save. Please note that there is no need to export the private key.

-7-

Guide for existing users of PGP Desktop Step 7 Return to your original browser window and click Browse to select the key file you exported in the last step. Next, click Continue.

Step 8 Following the successful upload of your Public key, you will get a screen like the one on the right. This step completes the basic process, and users of the Universal Server will be able to send you encrypted messages.

Step 9 After selecting Continue, you will be taken to your PGP Universal Secure Inbox. You can now close this window.

This completes the process of downloading a single Nationwide contacts public key. However, if you wish to automatically search the Nationwide server for public keys, proceed to Step 10.

-8-

Guide for existing users of PGP Desktop

Step 10 (Optional) To be able to add individual keys to your keyring you can search Nationwide's keyserver by adding to your standard key server search criteria. From within your PGPkeys application pull down the Tools Menu, PGP Options menu and select the ‘Edit Keyserver’ button.

Step 11 You will see a list of existing keyserver's, select the ‘Add’ button to add a new keyserver. You may add “keys.nationwide.co.uk” and press OK.

-9-

Guide for existing users of PGP Desktop Step 12 Back on the Options screen, make sure that “Save keys to my keyring” is selected under the “When keys are found:” drop down menu.

Once this server has been added you can search for Keys for the Domain you normally communicate with, download specified keys for people you normally communicate with, verify and sign the keys as you wish.

- 10 -