File Share Encryption

UPDATE: The 10.7.3 update is now compatible with PGP Desktop 10.2 MP4. Please update to this version before installing the 10.7.3 update for OS X.

http://www.symantec.com/docs/TECH178069

All aformentioned links broken (like software).  

On a back channel note, we installed 10.2 MP 1 on a MacBook Pro 15" (2009) and a MacBook Air 13" (2010) both with fresh installs of 10.7.2.  Both machines instrumented the disk and at the end, rebooted to corrupt hard disks.

This was after my boss, a very technically savvy engineer of many years turned senior executive, also installed PGP 10.2 MP 1 and it trashed his MacBook Air 13" (thunderbolt, SDD).

Anyone successfully have a MacBook Air 13" 2010 SDD/Thunderbolt unit encrypted under Mac OS X 10.7.2?  If so, have a link to a download of the software that works?

Thanks in advance.

Sorry about that. I fixed the link to the tech article for this problem with the 10.7.3 update.  You need to use 10.2 MP2  for the Macbook Air/SSD issues after encrypting- previous builds of 10.2 don't work with the new macbook air's with SSD drives.  You can find 10.2 mp2 on fileconnect here:

https://fileconnect.symantec.com

You should have a download serial number with your digital certificate that was emailed to you when you purchased the licenses. if you are unable to locate that information then you will need to call customer care and provide your contact ID or customer ID number to have them help you with the download.

Mac OS X 10.7.3 was released today, when will a fix be released?

Thanks

Not trying to pile on but the links above still do not work.  They should be pointing here:  http://www.symantec.com/docs/TECH178069.

YMMV, I tried that workaround this morning and it worked for me.

@PGP_Ben: We are targeting to fix this problem in a future update and that will most likely be in PGP Desktop 10.2.1 which is due to release sometime around Q2FY12.

Sorry, you must be joking when saying that a fix will come only with the next minor version sometime aroung June(!?) or am I wrong?

I hoped for at least a quick fix (MP4?).

It seems PGP is loosing attention and steam -- first under the PGP Corp. and now it gets ever worse under the Symantec brand.

What a nice product has it been around ver. 6.5 ...

Sorry, it looks like the problem was with the HTML code in the link at the top of this forum thread. I have fixed that (if you were to copy the url and paste it into another browser window that works). Anyway, 10.2 MP4 is out this week. stay tuned and I will try to update as soon as it's available.

Sorry, but if you read my later comment. We moved the target to 10.2 MP4 (which is out this week).  I will update the top post portion to reflect that also.

Please go on and release the MP4 as soon as technically feasible and tested, it is nevertheless a SECURITY product.

Thanks!

Downloaded and installed the 10.2 MP4 now, seems working ok, going to update the MacOS X to 10.7.3.

Our security analyst installed the update for MP4 to our universal server. I installed the update while running MP3.

Then, I upgraded from 10.7.2, 10.7.3. Took 30 min on 2.7 i7 (big update?) but everything is working OK after reboot.

Thanks for the release Symantec.

I was looking in the release notes for 10.2 MP4, and saw no reference to the fix to this problem in there.  Could we please get confirmation that the Mac update fix for 10.7.3 is actually in place?  If so, could the readme doc be updated to reflect this please?

http://www.symantec.com/business/support/resources/sites/BUSINESS/content/live/DOCUMENTATION/4000/DOC4559/en_US/pgpDesktop_Win_102MP4_readme_en.pdf

This is risky business because I didn't read this thread the first time I upgraded to 10.7.3 and was sitting with a unbootable HDD. Lucky I did the upgrade on a fresh and clean Mac so didn't hurt that bad to reinstall it all over.

But now it's a different story, can't afford to loose any data this time even though part of it is backed up. 

So my question is, if this would happen again, the HDD turns unbootable (not even recognized) Is there any chanse of getting by the WDE startup process and repair the damage done?

NVM found the working link for the the workaround.

You posted a link to the 10.2 PGP Desktop release notes for Windows. We don't document fixes for Mac OS X on the Windows release notes.

See here from our 10.2 MP4 for Mac release notes:

What's Changed in PGP Desktop for Mac OS X 10.2.0 MP 4
• Resolved the issue where the system did not boot after installing the Mac OS X 10.7.3 combo update on a drive that has been encrypted with PGP WDE. [2653110]

Link to our release notes:

http://www.symantec.com/business/support/resources/sites/BUSINESS/content/live/DOCUMENTATION/4000/DOC4554/en_US/pgpDesktop_Mac_102MP4_readme_en.pdf

I found out there is some new function of the pgpwded process that will monitor if there is a filevault encrypted disk then remove the pgpwde.kext from he extensions folder.

there is nothing in the release notes that suggest that this new logic was added in PGP desktop 10.2 MP4 or 10.2 MP3. (issue doesn't occur in 10.2 MP2)

The problem with this is that when a FV2 encrypted disk is connected to a WDE encrypted mac, pgp removes pgpwde.kext from the mac that is encrypted with wde.

Glad to hear that you found the solution :)

Sarah, I'm working with our team internally to find out what is going on there. Have you opened a support case on this issue yet? If not, I would recommend doing so. Last time I checked you guys still had an active support agreement.

We would like to gather more details on how the problem is occuring and what it is that you are doing with Filevault and PGP WDE.

Thanks,

Ben

ticket # 416-698-999

Steps to replicate issue

Step 1. Encrypt an external disk with FV2, open disk utility, click on the external disk, click on erase tab and select "Mac OS Extended (journaled, encrypted). Click Ok. Eject the disk

Step2. Install PGP desktop 10.2 MP4 (issue does not occur with MP2)

Step 3. Reboot

Step 4. Open /System/Library/Extensions  Open console.app from utilities and click on pgpwded.log

Step 5. Connect external disk

Then watch PGP remove the pgpwde.kext file from the extensions folder and pgpwded.log say that a core storage disk was detected and the wde driver will be disabled on next reboot.

Turning on fv2 isn't the culprit, connecting ANY fv2 disk to the computer will break a pgp wde encrypted mac.