N/pgp Module Limitations for Secure Messaging in NetSuite

The N/pgp module in NetSuite provides capabilities for secure messaging, file encryption, and document signing, based on OpenPGP encryption standards. However, there are notable limitations to be aware of when using this module.

What are the Limitations of the N/pgp Module?

The N/pgp module in SuiteScript 2.1 has several essential limitations:

• Key Generation: You cannot generate, modify, or inspect PGP keys using the module. Keys must be produced through third-party services that support PGP key generation.
• Message Creation: Creating a message requires readable PGP software.
• Data Handling: The module operates with strings and is limited to data that fits into memory.

These constraints mean that while the N/pgp module provides robust encryption capabilities, users must manage key generation and some data processing outside of NetSuite.

Who This Affects

The listed limitations primarily impact developers and administrators who are responsible for integrating secure messaging within NetSuite. Modules affected include:

• Integration
• Security

Administrators will need to ensure external key generation and secure storage using NetSuite's Secrets Management.

Key Takeaways

• The N/pgp module supports encryption and messaging based on OpenPGP standards, but key management must be external.
• Only works with strings and requires data to fit in memory.
• Administrators must store keys using API Secrets in NetSuite.