Familiarize yourself with the installation and configuration:

• The installation can be done centrally. You receive an MSI installer with the download links.
• Take a look at the Installation instructions and the available registry settings. The page FAQ for administrators could also be interesting for you.
• Please note that our Outlook add-in GpgOL is not compatible with some other add-ins, especially anti-virus ones. You can find a list of incompatible add-ins here.

Starting from a user base of around ten people, it can make sense to implement a suitable infrastructure; from 25 users, this is recommended.

• An LDAP server makes it easier to distribute certificates (public keys).
• The GnuPG actium tool automates the authentication process via a directory service
• With the WKD (Web Key Directory), certificates can be made publicly available for retrieval through your website.
• These services do not require additional licenses.
• Take a look at our white paper on the topics "Certificate management with GnuPG VS-Desktop^®"
• If you have any questions, please contact us!

Organizational matters

1. VSD version: Find out about the requirements for processing restricted information, for the German VS-NfD e.g. here:

   • General Administrative Provision for the Material Protection of Classified Information (Law text, German only)
   • Fact sheet on the website of the BMI (German only)
   • General Administrative Provision for the Material Protection of Classified Information (BSI)
   • Consulting on protection of classified information (BSI)
   • Documents for the approval and release of GnuPG VS-Desktop, as well as the manual for approval, are linked in the Kleopatra help menu.

2. Designate a person responsible for GnuPG. This person should be familiar with the topics related to GnuPG (VS-)Desktop and serves as a contact person for us.

3. Create a policy for the use of GnuPG Desktop in your organization together with your data protection or security officer.

4. Document for your users how GnuPG Desktop is used in your organization. This is also an important part of the documentation requirements and can be part of the GDPR TOMs (technical and organizational measures).