GnuPG VS-Desktop® 3.3.0 Is Here: Improved Certificate Management & Optimized Smartcard Support
Posted on January 30, 2025 by Heike Jurzik
As of January 23, 2025, the latest version of GnuPG VS-Desktop® is ready for action! Version 3.3.0 delivers enhanced certificate management, and a host of new improvements for Smartcards, group management, and certificate searches.
In this article, we break down the biggest updates and highlight what makes this release a must-have.
Certificate Management in GnuPG VS-Desktop® 3.3.0: More Control Over Subkeys and ADSKs
Managing your keys and certificates is now even more convenient:
- Update certificates directly from the main view—no extra steps via detail view required.
- In certificate search fields, all user IDs of a certificate are now offered in the drop-down menu, not just the primary UIDs.
- Improved certificate details with seperate tabs provide even better clarity.
- Kleopatra can now add preconfigured ADSKs (Additional Decryption Subkeys) in certificates.
Optimized User-Interface for Smartcards in GnuPG VS-Desktop®
The smart card management in GnuPG VS-Desktop 3.3.0® has been visually and functionally improved. The new version introduces a clearer structure with separate menus for card and card slot actions. Additionally, available actions have been refined based on the card type to provide a more intuitive user experience.
- Direct creation of certificates with private keys on smartcards.
- Enhanced PIN and PUK management: clearer labels and updated tooltips for a more user-friendly experience.
Improved Group Management and Certificate Search in GnuPG VS-Desktop®
Managing certificates, groups, and server search is even more intuitive with GnuPG VS-Desktop 3.3.0®.
- Create new groups directly from the certificate list: select certificates, right-click on the selection, and choose Create Group.
- Improved overview and easier management of Kleopatra groups.
- "Source" and "protocol" (OpenPGP or S/MIME aka X.509) can now be shown in the certificate list by clicking on the table header and selecting them.
- The predefined certificate filters are named more clearly and have helpful tooltips This allows you to find the desired certificates more quickly.
- The server search now returns results from all configured sources.
Important Changes for Administrators
The new version includes several key changes for administrators managing GnuPG VS-Desktop systems.
One of the most significant updates concerns the handling of
X.509 root certificates. Starting with version 3.3.0, root
certificates configured in the local trustlist.txt file are no longer
considered. This means that certificates previously marked as trusted
through this method will no longer be automatically classified as trusted.
If you want to retain the previous behavior, you can modify
this setting via the Windows Registry. Set the registry entry
DisableUserTrustlist to 0 to restore the previous handling
of trustlist.txt.
Detailed information on configuring root certificates and the trust model for S/MIME certificates can be found in our FAQs on S/MIME certificate trust.
In addition to these changes, GnuPG VS-Desktop® 3.3.0 brings numerous improvements in key management and encryption processes. Most notably, the ability to add Additional Decryption Subkeys (ADSKs) to existing certificates makes administration significantly easier.
What are ADSKs?
ADSKs (Additional Decryption Subkeys) are additional decryption subkeys that can be added to an OpenPGP certificate. This ensures that an encrypted message can be decrypted not only with the primary key but also with another authorized key.
This feature provides more flexibility and security for organizations:
- Backup Access: Protection in case of key loss.
- Multiple Users: Decryption without sharing the main key.
- Alternative Keys: Use of different keys on different devices or smartcards.
Why Upgrade to GnuPG VS-Desktop®?
With GnuPG VS-Desktop 3.3.0®, you can work even more efficiently. The new version improves certificate management and enhances server search accuracy. Groups are easier to organize, and key information is quicker to find. Plus, the software continues to meet the highest security standards. This update is worth it!