The Recordings Encryption feature allows you to encrypt your call recordings, store them safely, ensuring that no one except you will access the recordings, and decrypt them whenever you need them, using a previously created key.

The first thing you need to do to be able to use encryption is to add a key.

Adding an Encryption Key

To start the process, go to Cloud PBX & Dialer > Recordings Encryption, and click ADD KEY PAIR FOR RECORDINGS ENCRYPTION, and fill in the fields in the window that pops up.

You need to take two steps: create an encryption key pair and set the passphrase.

Step 1 - Encryption Key Pair Creation

Choose one of the two options suggested at the top of the window:

• Generate a private key in your browser
  The key will be created directly in your browser window.
  Proceed as follows:

1. Enter a description for your key. In your key list, it will be added in brackets next to your key ID.

2. Create a key passphrase according to requirements in the grey box on the right. Later, you will need the passphrase in order to use your private key to decrypt your recordings.

3. Confirm the passphrase.

4. Click GENERATE KEY.

   

5. You will see the generated key in the field below. Download it to be able to decrypt your recordings.

   

• Upload your own pre-generated private key RSA-4096
  You need to prepare a private RSA-4096 key in advance.
  To upload your own key:

1. Paste your key into the suggested box.

2. Optionally, enter the key passphrase.

3. Click VERIFY KEY.

   

4. If the key has been verified successfully, you will see the relevant message.

   

   

Step 2 - Setting the Passphrase

You should choose if you want your passphrase to be saved on CommPeak's secure servers.

If you do, your recordings will be decrypted automatically once you try to play them in CommPeak systems. Otherwise, if you don't save the passphrase, you must enter it each time you play your recording.

1. Switch the toggle to enable passphrase saving, or leave it off if you prefer not to save the passphrase.

2. To confirm your settings, enter the password you use when logging in to your CommPeak account in the field below.

3. Click ADD ENCRYPTION KEY.

   

Activating the Encryption Key

After you have created a new key, it will be added to the list of your keys, but not activated yet. By default, the toggle in the Activated column is in the OFF position for new keys.

To activate the key:

1. Click the toggle in the Activated column.

2. Read the pop-up message and click ACTIVATE KEY if you want to proceed with the activation.

   

The toggle will move to the ON position.

3. Ensure that the toggle at the top of the page that refers to all the keys is ON.
4. Select how you want the encryption to act in PBX Stats and the Dialer in Decryption Settings below the table: whether the passphrase must be entered each time you want to decrypt a recording, or it will be auto-filled.

5. Click SAVE.

6. In the confirmation window that pops up, enter your CommPeak account's password and then click SAVE SETTINGS.

   

The new key you have saved and activated will work for your future recordings.

Encryption Settings

Once you activate the recording encryption, at the bottom of the Recordings Encryption page, you will find additional encryption settings. Here you can choose to allow CommPeak to create additional keys for various purposes.

By default, the settings are deactivated. Please read the explanations attentively before changing the settings.

After changing the settings, click SAVE.