Key Usage (certification only)

[Timebomb]

I have a question with regards to key usage and subkeys.

When generating a new key, gpg allows me to create a "CS" Certification
and Signing Key" and I can create a an "E" encryption subkey.

Is it possible to create an "C' Certification only primary key, and add
a "S" signing subkey?

Thanks

[James P. Howard, II]

Post by Timebomb
I have a question with regards to key usage and subkeys.
When generating a new key, gpg allows me to create a "CS" Certification
and Signing Key" and I can create a an "E" encryption subkey.
Is it possible to create an "C' Certification only primary key, and add
a "S" signing subkey?

In GnuPG, yes (and it may be possible in PGP). Start GnuPG with --expert:

gpg --gen-key --expert

And when you have the option to select capabilities, turn off signing.
You can then add all the subkeys you need.

James

- --
James P. Howard, II, MPA MBCS CGFM
***@jameshoward.us