File Share Encryption

So the previous Admin of our PGP services passed away and I'm now trying to piece it all together.

We have approximately 100 clients running WDE on 10.3.0. (windows dekstop client).  We're rolling out Windows 8 so I needed to upgrade it to 10.3.1 and that from what I can tell required me to update the Universal PGP server.

I found the 3.3.1 MP1 PUP file from File Connect, downloaded, uploaded, and installed.  The universal server seems to be working fine, I was able to encrypt a Windows 8 workstation and the SSO works just fine.  So here is my predicament/Questions:

1. Even though my laptop now shows encrypted in the PGP desktop and everything looks good, the Universal server shows "None Encrypted".  
2. The old Desktop clients are there and reporting, but how do I update the version of PGP desktop, without Decrypting, uninstalling, and installing the new version?

Thanks in advance for your help.

-Curtiplas

Hi Curtiplas,

1) Check the following KB:

PGP Whole Disk Encryption Status not Reflecting on PGP Universal Server
http://www.symantec.com/docs/TECH192169

2) in your SEMS > Consumers > Consumer Policy > Default > General (Edit) check if the option "Notify users of software updates and automatically download" is ticked then your clients will get a pop up notifcation of the upgrade. If accepted than upgrade should be done in the background asking for reboot if completed.

HTH

Hi Curtiplas

Sorry to hear about your admin.

Here are some inputs on your query.

1. Even though my laptop now shows encrypted in the PGP desktop and everything looks good, the Universal server shows "None Encrypted".  

---Please verify if the new clients are able to communicate with the server. Try doing an update policy on the client.

You can also try re-enrolling one of the user. as The issue can occur due to a corrupt or bad preference file of PGP Desktop or when intermittent connection with the server or policy is not refreshed for a long period of time

http://www.symantec.com/docs/TECH192169 

1. The old Desktop clients are there and reporting, but how do I update the version of PGP desktop, without Decrypting, uninstalling, and installing the new version?

-- The new version should be simply installed over the top of the existing client following a restart (no uninstallation or decryption is required)

http://www.symantec.com/connect/forums/upgrading-pgp-desktop-clients-standardisation

Hope this helps

I'm about to upgrade for windows 8.1 support as well, does the update for the clinets trip UAC? I'm assuming so because of the restart piece. This would be a pain on account of our admins having to touch every machine.

The msi obeys normal msi switch commands.  So you can /quiet /norestart the msi to prevent it from restarting automatically.  Installing it with admin credentials via things like SCCM etc. will not prompt UAC.  The product will not work however without a restart.

Thanks, we are going to try and push the package with admin credentials via 2008 gpo.