...

• Keep your private key file on a safe, secure computer, and make sure you have a secure backup.
• Never use this key for purposes other than code signing or signing other keys.

1.

...

Generate Your Key

Carefully follow the instructions here to generate your key and check that SHA1 is avoided.

...

Note: After initially generating your key with GnuPG 2.x (gpg2), you can work with it using the more commonly-available 1.4.9 release (gpg).

2.

...

Publish Your Public Key

To enable people to find your public key, you should publish it.  This is a simple command with gpg:

...