Unexpected system behavior with AutoUpdate of Sophos Endpoint Security and Control 9.x or Microsoft SCCM 2007 and PGP Desktop 10.2 installed

Article:TECH168244  |  Created: 2011-08-26  |  Updated: 2012-02-08  |  Article URL http://www.symantec.com/docs/TECH168244
Article Type
Technical Solution



Sophos Endpoint Security and Control 9.5 or 9.7 and PGP Desktop 10.2 with WDE enabled is causing the computer to freeze after installation upon reboot. The problem was observed to be occuring more frequently with the Sophos Auto Update feature enabled and it doing frequent updates from the server. It would cause the whole desktop to freeze up and even ctrl-alt-del would not work.

The incompatability with SCCM 2007 was a little bit different in that we would only see ccmexec.exe crash sometimes or else they would experience a slow log-off time on the pc's when logging off of windows. After leaving it running for a several days prior to the logoff event.


Microsoft Windows XP SP3 - 32-bit/Microsoft Windows 7 - 32 and 64 bit

Sophos Endpoint Security and Control 9.5 or 9.7 or Microsoft SCCM 2007 SP3

PGP Desktop 10.2 with PGP Whole Disk Encryption (WDE) and Single-Sign On (SSO) enabled in the Consumer Policy


Incompatability with Sophos Auto-Update feature and PGP Desktop. This problem was due to a low-level driver issue with our pgppwflt.dll Password Filter Driver and the PGP SDK and an issue with the LSASS.exe process prematurely unloading our DLL. We have later discovered similar compatability problems with Microsoft's SCCM 2007 client causing issues with a slow logoff of Windows as well.


We have addressed this problem in PGP Desktop 10.2 MP3 HF1 (Build 2401) and later. Please update to 10.2 MP3 HF1 (at request of support) or 10.2 MP4 (which is generally available on FileConnect).

Article URL http://www.symantec.com/docs/TECH168244

Terms of use for this information are found in Legal Notices