File Share Encryption

Hi folks,

We have 200 users using pgp desktop wde without universal server but now decided to install pgp universal server for manging and reports.

So I have two questions.

1. How to make standalone agents to connect to the server without uninstalling agent or decryption hard disk.

2. How to upgrade pgp agent without uninstalling agent or decryption hard disk.

Thanks in advance.

Hi Gyeong,

Making a standalone PGP desktop managed to the new PGP server without uninstalling agent or decryption hard disk can be done in two ways:

First:

Create a package from the PGP server and install it on the current PGP desktop client and this will make it managed.

Second:

Change the PGP stamp and Re-enroll the client.

1. Right click on PGP tray icon and click on Exit PGP Services.
2. Change the PGP stamp under the registry location HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\PGP Corporation\PGP from “Default PGP Stamp” to the PGP server stamp which will generally be in the below format:

ovid=”YOUR SERVER HOSTNAME “&mail=*&admin=1

Example: ovid=keys.example.dom&mail=*&admin=1

3. Open Run and type %appdata%.
4.  Delete the PGPprefs.xml file under PGP Corporation Folder.
5. Open Start>Programs>Startup>PGP Tray.

After following these steps the re-enrollment process would start for PGP Desktop.

The second method can also be implemented using a script, if you have the expertise on working with scripts.

The upgrade og the PGP desktop can be done normally on the encrypted drive.

About the upgrade of the managed clients, this can be done on an encrypted machine. In a managed environment the through PGP universal server:

https://support.symantec.com/en_US/article.TECH177025.html

Many thanks Shahid.