File Share Encryption

 View Only
  • 1.  Can PGP universal server skip encrypt Whole Disk and just use for portable disk?

    Posted Sep 22, 2014 06:57 PM

    My company evlauate a VM product that have built-in encryption within VM boundary for desktop virtualization.  However, we still need to block  USB storage device to prevent user copying corporate data  within VM to external USB drive from to host.

     

    Is it possible to disable encrypt whole disk feature and only enable PGP portable disk function?

     

    Version:  PGP Univeral server  3.1.2

                    PGP desktop 10.1.2

                  

     

    Thanks,

    Jimmy



  • 2.  RE: Can PGP universal server skip encrypt Whole Disk and just use for portable disk?

    Posted Sep 22, 2014 07:53 PM

    It is possible to install PGP Desktop without using the drive encryption.  You could still have the option to use the PGP Portable feature, or encrypt portable/external devices with whole disk encryption.

    Depending on the virtual environment, however, PGP Desktop may not work as desired, and may have issues with the virtual connection to the physical external device for encryption.  It is generally not a supported configuration, which means that it may work, but has not been tested through QA.

    That being said, I have encrypted several flash drives connected to VMware-hosted Windows XP/7/8 installations that did not run drive encryption on the internal drives.



  • 3.  RE: Can PGP universal server skip encrypt Whole Disk and just use for portable disk?

    Posted Sep 22, 2014 08:24 PM

    Thanks for the info.

    Drive encryption is automatically started at PGP desktop at client side, how can we disable it from PGP universal server setting?

     

    Jimmy



  • 4.  RE: Can PGP universal server skip encrypt Whole Disk and just use for portable disk?

    Broadcom Employee
    Posted Sep 23, 2014 05:18 AM

    Hi

    You have to navigate to

    SEMS > Consumers > Consumer Policy > Default (or any other drive encrytpion policy ) > Desktop button > Drive Encryption tab.

    Scroll down and check if you have got option enable:

    "Automatically encrypt Boot Disk at installation"

    Disable it to disable automated encryption process.

    HTH