File Share Encryption

I would like to try FileVault 2. I am currently running Mac OS 10.8.2 and (PGP) Encryption Desktop 10.3 with WDE. When I installed Encryption Desktop 10.3, I tried to do a custom install and uncheck installation of WDE, but the checkbox to install WDE was grayed out, so I was forced to install WDE along with Encryption Desktop. (In older versions of PGP, it was possible to do a custom install PGP Desktop without WDE.) I have two questions:

1a. Does anyone know a way to install Encryption Desktop 10.3 without installing WDE?

... or ...

1b. Do you know how to safely remove WDE without removing the rest of Encryption Desktop?

2. Can someone confirm that Encryption Desktop (without WDE, see #1 above) does not interfere with FileVault 2?

Thanks!

Please see this Knowledge Base Article.

Thanks, Tom, for the quick response!

Here are two text-ready (copy/paste) URLs that point to the exact same page as Tom Mc's link above:

http://www.symantec.com/docs/TECH173502

http://www.symantec.com/business/support/index?page=content&id=TECH173502

You are welcome.  If the KBA addresses your concern(s), please use the Mark As Solution option on my prior post.

Hi Emorig,

just that you are aware:

10.3.0 has a known issue that WDE can't be unselected.

This has been solved in 10.3.0 MP1

You can find this in the Release Notes:

http://www.symantec.com/business/support/index?page=content&id=DOC6197

Also regarding filevault:

When you activate FileVault 2 for your Primary System Drive PGP WDE will unregister itself in 10.3.0+

When Filevault2 is being used on external drives I would highly recommend upgrade to 10.3.0 MP1 otherwise you have a high change of rendering your system unbootable (solved in MP1)

Hello Frank,

I downloaded 10.3.0 MP1 a few days ago. Last night I removed 10.3.0 and installed 10.3 MP1. During the installation, I clicked "custom" but was still unable to uncheck WDE, and was forced to install both products. 

I just verified that I am running 10.3.0 MP1 in the Desktop application.

I have not yet tried to remove WDE manually, as documented above.

@emorig

I apologize but it looks like we made a mistake in documenting this in our release notes. Since there was no code changes made to address this issue. Instead, it was determined, due to recent changes in the behavior or our product and re-branding changes, etc that it's no longer possible to have the customized install option. We did find that there are workarounds you can apply that will work though. For more information please see

http://www.symantec.com/docs/TECH183789

Sorry, but the link above (TECH183789) appears to be broken.

In addition, I would like to know when version 10.3.1 will be released. I believe it was due in April 2013, right?

Emorig, I'm not sure if this article I sent you is the most recent one. It looks like it was unpublished. It was written in 2012. However, I do have a workaround for you that should work to disable WDE if needed with Mac OS X (i'm working Engineering to try and fix the "Customize" option in our installer to allow you to uncheckDrive Encryption.

0) make sure to have Xcode and/or OSX development tools installed, this will also install the "Property List Editor" which is required for the further steps
1) download the PGP Desktop installer for OSX and unpack it
2) right click "PGP.pkg" and select to "show package contents"
3) click the file "Info.plist", this should open with the "Property List Editor"
4) expand the configuration item "IFPkgFlagPackageList" , then expand "Item1"
5) in "Item1" (PGPwde.pkg) change the entry "IGPkgFlagPackageSelection" from "selected" to "unselected". This will disable the installation of the file "PGPwde.pkg".
6) save the file "Info.plist" back to the package "PGP.pkg"
7) click "PGP.pkg" to install the modified package and then reboot
8) verify if the kernel extensions are installed in the default path
     # ls –alh /Systems/Library/Extensions/PGPwde.kext
   And verify if the kernel extensions are loaded with
     # kextstat | grep PGP

oh sorry, by the way. 10.3.1 release has been significantly delayed. We had too many issues that still needed to be fixed so they are delaying the release dates till probably Q3 of 2013.  But, we do have a couple more MP's that will be coming out on 10.3.0 release in the meantime with some of the critical bug fixes that were going into 10.3.1. 

Is there a particular fix you had in mind or just wondering?