Endpoint Encryption

 View Only
  • 1.  NEED HELP -Symantec Encryption Desktop - Corporate version 10.3.1

    Posted May 25, 2015 03:08 PM

    This is for Symantec Encryption Desktop - Corporate version 10.3.1  ___NOT__ v11.

    Symantec Encryption Desktop- Corporate v10.3.1
    Win8.1


    I have a situation.
    I'm sure you have heard if not you are now, the system caught the virus that 
    disables the keyboard and the mouse pointer. We are unable to access the 
    desktop since we cannot get passed the windows password screen.
    The pgp passphrase boot screen is unaffected.

    The solution to get rid of the virus after talking to some techs is to 
    "refresh" windows or do a full install of windows (no install point to revert 
    back to).

    Have access via the bios to the CMD line boot directory.

    The question here what effect will a "refresh" of windows (e.g. reinstalling 
    the OS only) have on the PGP program?
    Will a full formatting and full reinstall of windows be necessary to avoid 
    problems with the PGP program?

    Perhaps show me how to decrypt manually? I don't think I have a recovery disk for pgp.

    Thanks.

    John



  • 2.  RE: NEED HELP -Symantec Encryption Desktop - Corporate version 10.3.1

    Posted May 26, 2015 12:01 PM

    John,

    You could try using the recovery process to decrypt the drive.  More information can be found here:
    https://support.symantec.com/en_US/article.TECH214378.html

    Let me know if you have additional questions on the process.



  • 3.  RE: NEED HELP -Symantec Encryption Desktop - Corporate version 10.3.1

    Posted May 26, 2015 01:33 PM

    Mike, I got into the desktop...by way of the on screen keyboard.

    I went to the PGP program/encrypt disk/decrypt/entered the pass phrase and the drive is not decrypting but just shows a clean drive/I rebooted/the boot guard remains/ and I'm back at the PGP interface. The "encrpyt" button is there not the decrypt button. No disk action occurred.

     

    ???



  • 4.  RE: NEED HELP -Symantec Encryption Desktop - Corporate version 10.3.1

    Posted May 26, 2015 01:47 PM

    It sounds like the drive may be instrumented but not encrypted.  Open a command prompt as Administrator.  Navigate to C:\Program Files (x86)\PGP Corporation\PGP Desktop by entering this command:
    cd "C:\Program Files (x86)\PGP Corporation\PGP Desktop"

    Then run the following:
    pgpwde --enum

    That will tell you what the disk number is for the drive, then run this (where X is that drive number):
    pgpwde --status --disk X

    That result should show you if the drive is instrumented and/or encrypted, similar to this:
    C:\Program Files (x86)\PGP Corporation\PGP Desktop>pgpwde --status --disk 0
    Disk 0 is instrumented by bootguard.
      Current key is valid.
    Drive encrypted
      Total sectors: 625139712 highwatermark: 625139710 reserved start sectors: 2
    Failed login attempt lockout enabled. Max failures=5
    Request sent to Disk status was successful

    Post the results from those commands here or send them to me in a private message.  If the drive is instrumented but not encrypted, you should be able to uninstrument the drive by running this:
    pgpwde --uninstrument --disk X



  • 5.  RE: NEED HELP -Symantec Encryption Desktop - Corporate version 10.3.1

    Posted May 26, 2015 02:10 PM

    Slow going with this graphics keyboard. Question: Is the information you requested senstative to the security of the encryption (the reason why you said to private message you)?

     

    Working on the requested info.



  • 6.  RE: NEED HELP -Symantec Encryption Desktop - Corporate version 10.3.1

    Posted May 26, 2015 02:16 PM

    It really isn't sensitive, I posted mine directly from my system in the example above.  There really isn't any information that can be extrapolated by that other than the status of the drive encryption.  Some people prefer not to post any information from a production system, so I usually add the 'private message' part just in case.



  • 7.  RE: NEED HELP -Symantec Encryption Desktop - Corporate version 10.3.1

    Posted May 26, 2015 02:22 PM

    Keep this pending in your que.



  • 8.  RE: NEED HELP -Symantec Encryption Desktop - Corporate version 10.3.1

    Posted May 26, 2015 02:23 PM

    I have subscribed to this thread, so I am notfied via email of every post.  Just let me know how it goes.



  • 9.  RE: NEED HELP -Symantec Encryption Desktop - Corporate version 10.3.1

    Posted May 26, 2015 02:24 PM

    Roger that. I'll be in touch.



  • 10.  RE: NEED HELP -Symantec Encryption Desktop - Corporate version 10.3.1

    Posted May 26, 2015 02:24 PM

    Mike, good news... the after doing the status cmd dos said the decryption was interrupted because I was on batter power (on a laptop). and the Disk actioon for the decryption has started.

    I will update date you when decryption is complete or there is an error.

    thanks for you help and I will contact you in either case if decryption is successful or something more is "murphy'ed"

     

    Thanks!



  • 11.  RE: NEED HELP -Symantec Encryption Desktop - Corporate version 10.3.1

    Posted May 29, 2015 04:51 PM

    @Mike,

    All is good. Thanks!

     

    I also have sent you a private message.