Edge Import and Bulk API - Key Management - Overview

When importing files with sensitive data using Edge Import or Bulk API, organizations prefer to encrypt the import file, and Cornerstone provides Pretty Good Privacy (PGP) for encryption.

Prior to this enhancement, organizations used a PGP key managed by Cornerstone to encrypt their import files. The PGP key expired regularly at two to three years. Organizations using the PGP key relied on Cornerstone to announce the expiry of the key, share the new key, notify organizations to migrate to the new key, and assist in key migration.

With this enhancement, organizations can view and manage their PGP key information within Edge Import. This key is used in Edge Import and Bulk API. Organizations can download their active PGP key, view the key's expiry date, and generate a new PGP key that expires in 180 days. Administrators are notified if a PGP-encrypted file is present in an active Edge Import feed.

This functionality is available in Stage portals as of July 13.

How Does this Enhancement Benefit My Organization?

This functionality enables organizations to conveniently manage their own PGP key information.


PGP keys can only be used for encrypting .csv and .txt files. They cannot be used for Microsoft Excel files. This is to ensure secured data import of encrypted files is supported.

The current PGP key used for files by feeds outside Edge Import is still supported.

The PGP key generated from Edge Import can only be used for importing files used for Edge Import manual loads and feeds and Bulk API.


This functionality is automatically enabled for all organizations using Edge Import.

Upon release, the previously existing PGP key is available from the Manage Keys page, and it is named "CSOD Legacy PGP Key." The key's expiration date is displayed.

This functionality is available in Stage portals as of July 13.


The following existing permission applies to this functionality:

Access Edge Import Grants access to the Edge Import tool, which enables administrators to load data into their portal. This permission cannot be constrained. This is an administrator permission. Edge Import