PGP Encryption

PGP-related defaults are configured in the SFTP Destination delivery-extension section of RSreportserver.config .

<Extension Name="Deztec SFTP Destination" Type="Deztec.SFTPDestination.SFTPDeliveryProvider, Deztec.SFTPDestination">
    <MaxRetries>3</MaxRetries>
    <SecondsBeforeRetry>900</SecondsBeforeRetry>
    <Configuration>
        <RSSFTPDestinationConfiguration>
            <EncryptedFileExtention>.pgp</EncryptedFileExtention>
            <PGPPublicKeyFolder>C:\Program Files\Microsoft SQL Server Reporting Services\SSRS\ReportServer\PGPKeys\</PGPPublicKeyFolder>
        </RSSFTPDestinationConfiguration>
    </Configuration>
</Extension>

PGPPublicKeyFolder defaults to the PGPKeys folder inside the ReportServer directory. It defines the folder searched when the subscription specifies only a key filename. If the PGP Public Key Path in the subscription contains a backslash, it is treated as an absolute path instead.

PGP key files and folders must have appropriate permissions, allowing the SSRS service account read access.

EncryptedFileExtension controls the extension appended to encrypted output and defaults to .pgp . When PGP encryption is enabled, all encrypted files use the extension defined by this setting.