Endpoint Encryption

Hello,

I am having an issue accessing the folder shares using PGP NetShare 10.1.2.  I have a user with both a desktop and laptop, and she has installed and successfully configured/encrypted the share using PGP Netshare on her desktop.  However, accessing the files on her laptop is a no-go.  The same version of PGP Netshare has been installed on her laptop (running Win7 64-bit Enterprise SP1) as well, and the user account has been setup, but I still get "Access is denied" when trying to access the shared folder.  

Steps I have taken so far include exporting the key file from the desktop machine and importing it into her laptop, creating a new key, and adding the shared folders to the NetShare tab, but to no avail.  I have a feeling I did something wrong or something is missing, just not sure what.

Thanks for your assistance!

What you are trying to do should be easily achievable.  I'm sorry you are seeing this problem.

The operating system enforces access control based on the user, so assuming it is the same user, that should not be an issue (but it might be something to double-check; if you stop PGP services on the laptop, can you access the folder, and see the files as encrypted data?).

NetShare enforces access control based on the availability of a key.  It doesn't care about the user per se; if you add yourself to a NetShare folder, and give your key to another person, they can then access the same folder.

You can look at the NetShare properties of the folder and confirm which user keys have access.  Then, look at the keys available to your user on her laptop.  Make sure that you have the full keys (both public and private portions) and that the keys are Verified and key usage includes File Share Encryption.

Appreciate the prompt response dfinkelstein.  I believe the issue is that the right key is not verified.  I had two seperate keys listed (both the same user, but one verified and one not verified).  The "verified" one was one that I created new (and probably did it wrong if I wanted to access the share).  The user I imported the key from her desktop with was not verified.  Any idea on how to verify the key for that user?  I have a feeling that will resolve it for me.

You probably need to set it as having Implicit Trust.  Right Click on the key in PGP Desktop, select Key Properties, use the down arrow by Trust to select Implicit Trust.

Ok, so I have removed all users on her laptop to "start over", then went back to her desktop and right-clicked her key and clicked Export, then exported it to a share, then on her laptop, I chose File - Import, then pointed to the .asc file I exported.  It still shows up as not Verified, so I viewed Properties of it and for the Trust field, Implicit is not an available option (greyed out).  Does tihs mean the original key I exported is not the right type of key (Public instead of Private)?  I'm still a bit lost.  Thanks again for any suggestions.

This does mean that you did not make the needed selection to include the private key in the export.

Precisely.  I had found this solution from another page but this was indeed the case.  Thanks!