Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Super Silent Enrollment Install Not Adding Users to Access List

Created: 01 Apr 2013 | 20 comments

 

Hello,

I am attempting to configure PGP to deploy in super silent mode. I've installed the package using the following parameters:

msiexec /i  c:\PGPDesktop32.msi  PGP_INSTALL_DISABLESSOENROLL=0 /quiet /norestart

 

I am finding that when I process enrollments in this way, the currently logged in user is not being added to the access list. It appears to be adding a different user that only exists for Desktop Authority Controls. If I log out once encryption has begun, and then log back in to the user I would like to add, it then appears to add the user correctly.

 

I've also seen cases when enrolling in this way that the computer or the user does not appear on the server as enrolled.

 

The interesting thing is the whole processed worked fine for about a week when we first tried the super silent mode, but then it stopped working.

I've also tried installing without the /norestart parameter as was suggested for someone else having a similar issue, but that did not resolve the issue either.

 

Any advice would be appreciated.

Operating Systems:

Comments 20 CommentsJump to latest comment

Alex_CST's picture

The users wont be enrolled until they next reboot I think

Please mark posts as solutions if they solve your problem!

http://www.cstl.com

Jeff_LSI's picture

The problem is if you fail to log off and log back on, and perform a restart (or let the computer hibernate) you are not able to turn the computer back on, as you cannot get past bootguard, due to no one being on the access list.

Alex_CST's picture

As far as I am aware, you cannot enroll people until the machine has been bounced, which means that the drive shouldn't be encrypting until the machine has been bounced also.  So when the machine goes into hibernation, the software is considering that a reboot and beginning to encrypt but not enrolling?

Please mark posts as solutions if they solve your problem!

http://www.cstl.com

Jeff_LSI's picture

Hi,

Sorry, allow me to clarifiy the installation process.

1. Software is installed silently using msiexec /i  c:\PGPDesktop32.msi  PGP_INSTALL_DISABLESSOENROLL=0 /quiet /norestart

2. Machine is rebooted.

3. Machine is logged in with the user that is needing to be enrolled.

4. Machine acts like it is enrolling user (screen flashes quickly with the enrolling status bar)

5. Machine begins encrypting.

6. After machine finishes encrypting, the user access list is checked. The only user on the list is a user that has never been logged into this machine. It is a user used for Domain Authority controls.

7. Log out the user that was logged in with step 3.

8. Log the user back in. Now they have been added to the access control list.

 

The problem is, if you reboot or the machine hibernates (as we often being encryptions immediately prior to leaving for the day) before performing steps 7 and 8, you are stuck on bootguard, because pgp has added some random user with no passphrase or anything to the machine. In these cases, the machine is often, but not always, not populated on the PGP server either.

Alex_CST's picture

Hmm, is it adding the service account used to read the LDAP directory?

 

It appears that enrollment isnt working, can you check the pgp log both on the client and the universal server to see if there's anything there?  Also I would enable debug logging on a machine with pgp desktop installed on then attempt to enroll, once it starts encrypting or looks like its enrolled, turn debugging off again and post the log in here?

 

http://www.symantec.com/business/support/index?page=content&id=TECH149847

 

 

Please mark posts as solutions if they solve your problem!

http://www.cstl.com

Jeff_LSI's picture

Hi,

 

Thanks for your reply. I'm having trouble configuring the logging correctly.....I found this article to assist me: http://www.symantec.com/business/support/index?pag...

But i'm not sure what logs to pull once the enrollment is complete. Also, on the client side, is the only option tools-> logging checkmark? If there is an additional option for more verbose logging on the client side i'm having trouble finding it.

Jeff_LSI's picture

Like I said, i'm sure I'm looking in the wrong place and/or screwed this up, but this is what I have so far. From the server:

2013/04/08 14:08:36 -04:00  INFO   pgp/client[3243]:     CLIENT-03131: connection from 10.1.230.65
2013/04/08 14:08:36 -04:00  NOTICE pgp/client[3243]:     CLIENT-03131: authenticated internal PGP Desktop 10.2.0.2599 user jalway from [10.1.230.65]
2013/04/08 14:08:36 -04:00  INFO   pgp/client[3243]:     CLIENT-03131: client request [internal user jalway]: <SendEvent>
2013/04/08 14:08:36 -04:00  INFO   pgp/client[3243]:     CLIENT-03131: FIPS Event [time Mon 08 Apr 2013 02:09:12 PM EDT] FIPS integrity checks disabled
2013/04/08 14:08:36 -04:00  INFO   pgp/client[3243]:     CLIENT-03131: client request [internal user jalway]: <SendEvent>
2013/04/08 14:08:36 -04:00  INFO   pgp/client[3243]:     CLIENT-03131: WDE Event [time Mon 08 Apr 2013 02:09:15 PM EDT, machine 8e31a6f7-ec5d-42a0-b6ac-124c850331c2, device 8e31a6f7-ec5d-42a0-b6ac-124c850331c2, partition 1] user: added, type passphrase, lsrconfigured false, keyid <not specified>, username jalway, user uuid c85b6838-39c7-4d3f-a1e8-d336a70b905c
2013/04/08 14:08:36 -04:00  INFO   pgp/client[3243]:     CLIENT-03131: client request [internal user jalway]: <SendEvent>
2013/04/08 14:08:36 -04:00  INFO   pgp/client[3243]:     CLIENT-03131: WDE Event [time Mon 08 Apr 2013 02:09:15 PM EDT, machine 8e31a6f7-ec5d-42a0-b6ac-124c850331c2, device 8e31a6f7-ec5d-42a0-b6ac-124c850331c2, partition 1] user: added, type admin-passhrase, lsrconfigured false, keyid <not specified>, username WDE Administrator, user uuid c85b6838-39c7-4d3f-a1e8-d336a70b905c
2013/04/08 14:08:36 -04:00  INFO   pgp/client[3243]:     CLIENT-03131: client request [internal user jalway]: <SendLogString>
2013/04/08 14:08:36 -04:00  INFO   pgp/client[3243]:     CLIENT-03131: User jalway started encryption on disk C:\ WDC WD3200BEKT-75PVMT1 on machine LT2393 at 2013/04/08 14:09:16.000275
2013/04/08 14:08:36 -04:00  INFO   pgp/client[3243]:     CLIENT-03131: client request [internal user jalway]: <SendEvent>
2013/04/08 14:08:36 -04:00  INFO   pgp/client[3243]:     CLIENT-03131: WDE Event [time Mon 08 Apr 2013 02:09:16 PM EDT, machine 8e31a6f7-ec5d-42a0-b6ac-124c850331c2, device 8e31a6f7-ec5d-42a0-b6ac-124c850331c2, partition 1] status changed: encrypting: <not specified>
2013/04/08 14:08:36 -04:00  INFO   pgp/client[3243]:     CLIENT-03131: client request [internal user jalway]: <SendEvent>
2013/04/08 14:08:36 -04:00  INFO   pgp/client[3243]:     CLIENT-03131: WDE Event [time Mon 08 Apr 2013 02:09:16 PM EDT, machine 8e31a6f7-ec5d-42a0-b6ac-124c850331c2, device 8e31a6f7-ec5d-42a0-b6ac-124c850331c2, partition 1] update WDRT
2013/04/08 14:08:36 -04:00  INFO   pgp/client[3243]:     CLIENT-03131: client request [internal user jalway]: <SendEvent>
2013/04/08 14:08:36 -04:00  INFO   pgp/client[3243]:     CLIENT-03131: WDE Event [time Mon 08 Apr 2013 02:09:16 PM EDT, machine 8e31a6f7-ec5d-42a0-b6ac-124c850331c2, device 8e31a6f7-ec5d-42a0-b6ac-124c850331c2, partition 1] mount: success, user <WDRT>, events 1, time Mon 08 Apr 2013 02:09:16 PM EDT
2013/04/08 14:08:36 -04:00  INFO   pgp/client[3243]:     CLIENT-03131: client request [internal user jalway]: <SendEvent>
2013/04/08 14:08:36 -04:00  INFO   pgp/client[3243]:     CLIENT-03131: WDE Event [time Mon 08 Apr 2013 02:09:16 PM EDT, machine 8e31a6f7-ec5d-42a0-b6ac-124c850331c2, device 8e31a6f7-ec5d-42a0-b6ac-124c850331c2, partition 1] update WDRT
2013/04/08 14:08:36 -04:00  INFO   pgp/client[3243]:     CLIENT-03131: client request [internal user jalway]: <SendLogString>
2013/04/08 14:08:36 -04:00  INFO   pgp/client[3243]:     CLIENT-03131: User jalway used a WDRT on disk C:\ WDC WD3200BEKT-75PVMT1 on machine LT2393 at 2013/04/08 14:09:16.000415
2013/04/08 14:08:36 -04:00  INFO   pgp/client[3243]:     CLIENT-03131: client request [internal user jalway]: <SendEvent>
2013/04/08 14:08:36 -04:00  INFO   pgp/client[3243]:     CLIENT-03131: WDE Event [time Mon 08 Apr 2013 02:09:16 PM EDT, machine 8e31a6f7-ec5d-42a0-b6ac-124c850331c2, device 8e31a6f7-ec5d-42a0-b6ac-124c850331c2, partition 1] WDRT used
2013/04/08 14:08:36 -04:00  INFO   pgp/client[3243]:     CLIENT-03131: client request [internal user jalway]: <SendEvent>
2013/04/08 14:08:36 -04:00  INFO   pgp/client[3243]:     CLIENT-03131: WDE Event [time Mon 08 Apr 2013 02:09:16 PM EDT, machine 8e31a6f7-ec5d-42a0-b6ac-124c850331c2, device 8e31a6f7-ec5d-42a0-b6ac-124c850331c2, partition 1] machine detected
2013/04/08 14:08:36 -04:00  INFO   pgp/client[3243]:     CLIENT-03131: client request [internal user jalway]: <SendEvent>
2013/04/08 14:08:36 -04:00  INFO   pgp/client[3243]:     CLIENT-03131: WDE Event [time Mon 08 Apr 2013 02:09:16 PM EDT, machine 8e31a6f7-ec5d-42a0-b6ac-124c850331c2, device 8e31a6f7-ec5d-42a0-b6ac-124c850331c2, partition 1] device detected
 

 

From the client (forgot to enable force whole disk encryption intially, adjusted and forced policy update, and logged off/on the machine):

 

14:07:05            ----- PGP Desktop started -----
14:07:05            PGP Desktop 10.2.0 (Build 2599) (2599)
14:07:05            Today's date is Monday, April 08, 2013
14:07:05 PGP     Info    Setting logging level to: normal
14:07:09 Email     Info    Creating new account list entry for 10.10.110.125
14:07:09 PGP     Info    Initiating daily maintenance procedures
14:07:11 PGP     Error    Certificate Enrollment has failed with error: Smart card not found (-10844)
14:07:12 PGP     Info    Beginning synchronization with configuration server lsi-qwest-pgp.laserspineinstitute.com
14:07:17 PGP     Info    Completed synchronization with configuration server lsi-qwest-pgp.laserspineinstitute.com
14:07:20 PGP     Info    Beginning synchronization with configuration server lsi-qwest-pgp.laserspineinstitute.com
14:07:23 Email     Warning    Email proxying has been disabled by the user
14:07:24 NetShare     Verbose    Policy update initiated
14:07:24 NetShare     Verbose    Custom location-based Blacklist: no items
14:07:24 NetShare     Verbose    Location-based Whitelist: no items
14:07:24 NetShare     Verbose    Custom app-based Blacklist: no items
14:07:24 NetShare     Verbose    App-based Whitelist: no items
14:07:27 NetShare     Debug    Policy update skipped
14:07:33 NetShare     Debug    Policy update skipped
14:08:37 PGP     Info    Policy update manually invoked
14:08:37 PGP     Info    Beginning synchronization with configuration server lsi-qwest-pgp.laserspineinstitute.com
14:08:37 PGP     Info    Sending logging data to configuration server
14:08:38 Email     Info    Group policy has changed to '2b1110aa-e0ae-49f8-bf87-4eda9ff07ec0'
14:08:38 NetShare     Debug    Policy update skipped
14:08:38 NetShare     Debug    Policy update skipped
14:08:38 NetShare     Debug    Policy update skipped
14:08:39 NetShare     Debug    Policy update skipped
14:08:40 NetShare     Debug    Policy update skipped
14:08:40 PGP     Info    Completed synchronization with configuration server lsi-qwest-pgp.laserspineinstitute.com
14:08:40 NetShare     Debug    Policy update skipped
14:08:43 NetShare     Debug    Policy update skipped
14:09:12            ----- PGP Desktop started -----
14:09:12            PGP Desktop 10.2.0 (Build 2599) (2599)
14:09:12            Today's date is Monday, April 08, 2013
14:09:12 Email     Warning    Email proxying has been disabled by the user
14:09:12 PGP     Info    Setting logging level to: normal
14:09:12 Email     Warning    Email proxying has been disabled by the user
14:09:16 PGP     Info    Beginning synchronization with configuration server lsi-qwest-pgp.laserspineinstitute.com
14:09:16 WDE     Info    User jalway added WDE user jalway to DiskGroup 8e31a6f7-ec5d-42a0-b6ac-124c850331c2
14:09:16 WDE     Info    User WDE_SYSTEM added WDE user WDE Administrator to DiskGroup 8e31a6f7-ec5d-42a0-b6ac-124c850331c2
14:09:16 WDE     Info    Updated WDRT for DiskGroup: 8e31a6f7-ec5d-42a0-b6ac-124c850331c2
14:09:16 WDE     Info    User jalway started encryption on disk C:\ WDC WD3200BEKT-75PVMT1 on machine LT2393 at 2013/04/08 14:09:16.000275
14:09:16 WDE     Info    User jalway used a WDRT on disk C:\ WDC WD3200BEKT-75PVMT1 on machine LT2393 at 2013/04/08 14:09:16.000415
14:09:17 PGP     Info    Completed synchronization with configuration server lsi-qwest-pgp.laserspineinstitute.com
14:09:17 PGP     Info    Initiating daily maintenance procedures
14:09:17 NetShare     Verbose    Policy update initiated
14:09:17 NetShare     Verbose    Custom location-based Blacklist: no items
14:09:17 NetShare     Verbose    Location-based Whitelist: no items
14:09:17 NetShare     Verbose    Custom app-based Blacklist: no items
14:09:17 NetShare     Verbose    App-based Whitelist: no items
14:09:18 WDE     Info    Whole Disk Operation has started. Computer is on AC power.
14:09:19 NetShare     Debug    Policy update skipped
14:09:26 NetShare     Debug    Policy update skipped
14:11:14 PGP     Info    Sending logging data to configuration server
14:11:26 NetShare     Debug    Policy update skipped
14:11:26 NetShare     Debug    Policy update skipped
14:11:28 NetShare     Debug    Policy update skipped
14:17:01 PGP     Info    Setting logging level to: verbose

Alex_CST's picture

We really need to see what debug level logs are on the client really - that log snippet isn't giving a lot away. When you enable debug logs on the client it should log all events including adding users to the machine etc etc and any errors relating to that.

This link http://www.symantec.com/business/support/index?page=content&id=TECH149847 is for enabling debug logging on the client.  It's a reg entry change + reboot - best thing is to enable debug logging and reboot at the same time of enrolling to save time.

 

Please mark posts as solutions if they solve your problem!

http://www.cstl.com

Jeff_LSI's picture

Thanks again for your continued support. Below are two logs.

 

Log 1:

11:12:40            ----- PGP Desktop started -----
11:12:40            PGP Desktop 10.2.0 (Build 2599) (2599)
11:12:40            Today's date is Tuesday, April 09, 2013
11:12:41 PGP     Info    Setting logging level to: normal
11:12:44 Email     Info    Creating new account list entry for 10.10.110.125
11:12:45 PGP     Info    Initiating daily maintenance procedures
11:14:42 Email     Error    Cannot proxy process 2644 due to insufficient privileges.  Process may be a service.
11:21:01            ----- PGP Desktop started -----
11:21:01            PGP Desktop 10.2.0 (Build 2599) (2599)
11:21:01            Today's date is Tuesday, April 09, 2013
11:21:01 PGP     Info    Setting logging level to: 0xF3F
11:21:01 Email     Debug    >> PGPocTrayLoadAccountData
11:21:01 Email     Debug    << PGPocTrayLoadAccountData
11:21:01 Email     Debug    << PGPocTrayLoadPrefsData
11:21:01 Email     Debug    << PGPocInitApplication
11:21:01 Email     Debug    >> PGPocInitThreads
11:21:01 Email     Verbose    Listening on port 33333
11:21:01 Email     Debug    >> PGPocInitializeWorkerThreads
11:21:01 Email     Debug    << PGPocInitializeWorkerThreads
11:21:01 PGP     Verbose    Worker threads started
11:21:02 Email     Verbose    Connection accepted
11:21:02 Email     Debug    Queueing socket 0x574 for worker
11:21:02 Email     Debug    Socket 0x574 dequeued by worker
11:21:02 Email     Debug    Received OIPCINIT
11:21:02 Email     Debug    >> PGPocInitIndirectSession
11:21:02 Email     Debug    Session-type: LSP
11:21:02 Email     Debug    Don't proxy ourselves
11:21:02 Email     Debug    Not redirecting LSP session
11:21:02 Email     Debug    << PGPocInitIndirectSession
11:21:02 Email     Debug    PGPocInitIndirectSession succeeded
11:21:02 Email     Debug    Sending OIPCINITRESP
11:21:02 Email     Debug    Closed client socket: 0x574
11:21:03 Email     Debug    << PGPocInitThreads
11:21:03 Email     Debug    Token thread successfully loaded PKCS11 driver ''
11:21:03 Email     Debug    Starting initialization procedure
11:21:03 Email     Debug    >> PGPocTrayLoadPrefsData
11:21:03 Email     Debug    << PGPocTrayLoadPrefsData
11:21:05 Email     Verbose    Looking for account data for mail server lsi-qwest-pgp.laserspineinstitute.com; PGP server lsi-qwest-pgp.laserspineinstitute.com; user (null); and address (null)
11:21:05 Email     Verbose    Found existing service for messaging server lsi-qwest-pgp.laserspineinstitute.com
11:21:05 Email     Verbose    Existing entry is (untitled)
11:21:05 Email     Debug    >> PGPocTrayCacheAccountPassphrases
11:21:05 Email     Debug    << PGPocTrayCacheAccountPassphrases
11:21:05 Email     Debug    >> PGPocOvidServerSyncWithConfigServer
11:21:05 Email     Debug    << PGPocOvidServerSyncWithConfigServer
11:21:05 PGP     Info    Initiating daily maintenance procedures
11:21:09 PGP     Error    Certificate Enrollment has failed with error: Smart card not found (-10844)
11:21:16 Email     Debug    Initiating enrollment
11:21:16 Email     Debug    >> PGPocOvidServerSyncWithConfigServer
11:21:16 PGP     Info    Beginning synchronization with configuration server lsi-qwest-pgp.laserspineinstitute.com
11:21:16 Email     Debug    >> sServerGetPrefs
11:21:16 Email     Debug    >> PGPocTrayStoreAccountData
11:21:16 Email     Debug    << PGPocTrayStoreAccountData
11:21:16 Email     Debug    << sServerGetPrefs
11:21:16 Email     Verbose    Attempting to download user policy from lsi-qwest-pgp.laserspineinstitute.com
11:21:17 Email     Debug    >> PGPocTrayStoreAccountData
11:21:17 Email     Debug    << PGPocTrayStoreAccountData
11:21:17 Email     Debug    >> sServerGetUpdateInfo
11:21:17 Email     Debug    >> sGetPolicyListFromOvidServerV25
11:21:17 Email     Debug    Retrieved XML policies from server
11:21:17 Email     Debug    >> PGPocTrayStoreAccountData
11:21:17 Email     Debug    << PGPocTrayStoreAccountData
11:21:17 Email     Debug    << sGetPolicyListFromOvidServerV25
11:21:18 PGP     Info    Completed synchronization with configuration server lsi-qwest-pgp.laserspineinstitute.com
11:21:18 Email     Debug    << PGPocOvidServerSyncWithConfigServer
11:21:19 Email     Debug    >> OCKeySetupSetup
11:21:19 Email     Debug    >> sFindDataForConfigServer
11:21:19 Email     Verbose    Looking for account data for mail server lsi-qwest-pgp.laserspineinstitute.com; PGP server lsi-qwest-pgp.laserspineinstitute.com; user (null); and address (null)
11:21:19 Email     Verbose    Found existing service for messaging server lsi-qwest-pgp.laserspineinstitute.com
11:21:19 Email     Verbose    Existing entry is (untitled)
11:21:19 Email     Debug    << sFindDataForConfigServer
11:21:19 Email     Debug    >> PGPocOvidServerSyncWithConfigServer
11:21:19 PGP     Info    Beginning synchronization with configuration server lsi-qwest-pgp.laserspineinstitute.com
11:21:19 Email     Debug    >> sServerGetPrefs
11:21:19 Email     Debug    >> PGPocTrayStoreAccountData
11:21:19 Email     Debug    << PGPocTrayStoreAccountData
11:21:19 Email     Debug    << sServerGetPrefs
11:21:19 Email     Verbose    Attempting to download user policy from lsi-qwest-pgp.laserspineinstitute.com
11:21:20 Email     Debug    Looking for key orgKeyID with id 0x916669391C2391E6
11:21:20 Email     Debug    Found keyblock orgKeyBlock
11:21:20 Email     Debug    Found key 0x916669391C2391E6
11:21:20 Email     Debug    >> PGPocTrayStoreAccountData
11:21:20 Email     Debug    << PGPocTrayStoreAccountData
11:21:20 Email     Debug    >> PGPocTrayStoreAccountData
11:21:20 Email     Debug    << PGPocTrayStoreAccountData
11:21:20 Email     Debug    << PGPocOvidServerSyncWithConfigServer
11:21:20 Email     Debug    >> PGPocTrayReloadLocalKeys
11:21:20 Email     Debug    >> PGPocTrayLoadLocalKeys
11:21:21 Email     Debug    << PGPocTrayLoadLocalKeys
11:21:21 Email     Debug    << PGPocTrayReloadLocalKeys
11:21:21 Email     Debug    >> OCEnsurePrivateKey
11:21:21 Email     Debug    >> PGPocOvidServerGetLDAPUserInfo
11:21:21 Email     Debug    >> sSoapContextForThread
11:21:21 Email     Debug    << sSoapContextForThread, context already created
11:21:21 Email     Debug    >> PGPocTrayStoreAccountData
11:21:21 Email     Debug    << PGPocTrayStoreAccountData
11:21:21 Email     Debug    << PGPocOvidServerGetLDAPUserInfo
11:21:21 Email     Debug    Private key sought apart from any MIME msg for (unnamed) <(unknown)>
11:21:21 Email     Debug    In SKM mode
11:21:21 Email     Debug    Initializing, or working with an EOS
11:21:21 Email     Debug    >> PGPocOvidServerGetPrivateKey
11:21:21 Email     Debug    >> PGPocOvidServerGetOurKey
11:21:21 Email     Debug    >> sSoapContextForThread
11:21:21 Email     Debug    << sSoapContextForThread, context already created
11:21:21 Email     Verbose    Attempting to download our key from lsi-qwest-pgp.laserspineinstitute.com
11:21:21 Email     Debug    Successfully downloaded key
11:21:22 Email     Debug    >> PGPocTraySaveKeyToLocalKeyring
11:21:23 Email     Debug    >> PGPocTrayLoadLocalKeys
11:21:24 Email     Debug    << PGPocTrayLoadLocalKeys
11:21:24 Email     Debug    << PGPocTraySaveKeyToLocalKeyring
11:21:24 Email     Debug    >> PGPocTrayReloadLocalKeys
11:21:24 Email     Debug    >> PGPocTrayLoadLocalKeys
11:21:24 Email     Debug    << PGPocTrayLoadLocalKeys
11:21:24 Email     Debug    << PGPocTrayReloadLocalKeys
11:21:24 Email     Debug    >> PGPocTraySaveKeyToLocalKeyring
11:21:26 Email     Debug    >> PGPocTrayLoadLocalKeys
11:21:26 Email     Debug    << PGPocTrayLoadLocalKeys
11:21:26 Email     Debug    << PGPocTraySaveKeyToLocalKeyring
11:21:26 Email     Debug    >> PGPocTrayReloadLocalKeys
11:21:26 Email     Debug    >> PGPocTrayLoadLocalKeys
11:21:26 Email     Debug    << PGPocTrayLoadLocalKeys
11:21:26 Email     Debug    << PGPocTrayReloadLocalKeys
11:21:26 Email     Debug    << PGPocOvidServerGetOurKey
11:21:26 Email     Verbose    Downloaded SKM key 0x8657C25A from lsi-qwest-pgp.laserspineinstitute.com
11:21:26 Email     Debug    Holding onto downloaded private key. Worker's keydb has 0 keys
11:21:26 Email     Debug    After copy worker's keydb has 1 keys
11:21:26 Email     Debug    >> PGPocAccountStoreWorkerPrivateKey
11:21:26 Email     Debug    >> PGPocTrayStoreAccountData
11:21:27 Email     Debug    << PGPocTrayStoreAccountData
11:21:27 Email     Debug    << PGPocAccountStoreWorkerPrivateKey
11:21:27 Email     Debug    >> PGPocTrayMergeKeyToLocalKeyring
11:21:27 Email     Debug    << PGPocTrayMergeKeyToLocalKeyring, SKM short-circuit
11:21:27 Email     Debug    << PGPocOvidServerGetPrivateKey
11:21:27 Email     Debug    << OCEnsurePrivateKey
11:21:27 Email     Verbose    Organization key 0x916669391C2391E6 specified by server
11:21:27 Email     Debug    << OCKeySetupSetup
11:21:30 WDE     Info    User pgpadmin added WDE user DACU to DiskGroup 15706a0d-907c-4619-9d13-d6847611b7d7
11:21:31 WDE     Info    User WDE_SYSTEM added WDE user WDE Administrator to DiskGroup 15706a0d-907c-4619-9d13-d6847611b7d7
11:21:31 WDE     Info    Updated WDRT for DiskGroup: 15706a0d-907c-4619-9d13-d6847611b7d7
11:21:31 WDE     Info    User pgpadmin started encryption on disk C:\ ST320LT007-9ZV142 on machine LT2197 at 2013/04/09 11:21:31.000770
11:21:32 Email     Debug    >> PGPocTrayReloadLocalKeys
11:21:32 Email     Debug    >> PGPocTrayLoadLocalKeys
11:21:32 Email     Debug    << PGPocTrayLoadLocalKeys
11:21:32 Email     Debug    << PGPocTrayReloadLocalKeys
11:21:33 Email     Debug    >> PGPocTrayLoadPrefsData
11:21:33 Email     Warning    Email proxying has been disabled by the user
11:21:33 Email     Debug    << PGPocTrayLoadPrefsData
11:21:34 WDE     Info    Whole Disk Operation has started. Computer is on AC power.
11:21:34 Email     Debug    >> PGPocTrayLoadPrefsData
11:21:34 Email     Debug    << PGPocTrayLoadPrefsData
11:21:34 Email     Debug    >> PGPocTrayLoadPrefsData
11:21:34 Email     Debug    << PGPocTrayLoadPrefsData
11:21:35 NetShare     Verbose    Policy update initiated
11:21:35 Email     Debug    >> PGPocTrayLoadPrefsData
11:21:35 Email     Debug    << PGPocTrayLoadPrefsData
11:21:35 NetShare     Verbose    Custom location-based Blacklist: no items
11:21:35 Email     Debug    >> PGPocTrayLoadPrefsData
11:21:35 Email     Debug    << PGPocTrayLoadPrefsData
11:21:35 NetShare     Verbose    Location-based Whitelist: no items
11:21:35 Email     Debug    >> PTOCHandlePolicyChange
11:21:35 Email     Debug    >> PGPocTrayLoadPrefsData
11:21:35 Email     Debug    >> PGPocTrayLoadAccountData
11:21:35 Email     Debug    << PGPocTrayLoadAccountData
11:21:35 Email     Debug    << PGPocTrayLoadPrefsData
11:21:35 Email     Debug    << PTOCHandlePolicyChange
11:21:35 NetShare     Verbose    Custom app-based Blacklist: no items
11:21:35 Email     Debug    >> PGPocTrayLoadPrefsData
11:21:35 Email     Debug    << PGPocTrayLoadPrefsData
11:21:35 NetShare     Verbose    App-based Whitelist: no items
11:21:35 Email     Debug    >> PGPocTrayReloadLocalKeys
11:21:35 Email     Debug    >> PGPocTrayLoadLocalKeys
11:21:36 Email     Debug    << PGPocTrayLoadLocalKeys
11:21:36 Email     Debug    << PGPocTrayReloadLocalKeys
11:21:36 Email     Debug    >> PGPocTrayLoadPrefsData
11:21:36 Email     Debug    << PGPocTrayLoadPrefsData
11:23:03 Email     Debug    Initiating log uploading
11:23:04 PGP     Info    Sending logging data to configuration server
11:23:16 Email     Debug    >> PGPocTrayLoadPrefsData
11:23:16 Email     Debug    << PGPocTrayLoadPrefsData
11:23:23 Email     Debug    >> PGPocTrayLoadPrefsData
11:23:23 Email     Debug    << PGPocTrayLoadPrefsData
11:29:04 Email     Debug    Initiating log uploading
11:30:04 Email     Debug    Initiating log uploading
11:31:04 Email     Debug    Initiating log uploading
11:32:04 Email     Debug    Initiating log uploading
11:33:04 Email     Debug    Initiating log uploading
11:34:04 Email     Debug    Initiating log uploading
11:35:04 Email     Debug    Initiating log uploading
11:36:04 Email     Debug    Initiating log uploading
11:37:04 Email     Debug    Initiating log uploading
11:38:04 Email     Debug    Initiating log uploading
11:39:04 Email     Debug    Initiating log uploading
11:40:04 Email     Debug    Initiating log uploading
11:41:03 Email     Debug    Initiating log uploading
11:42:03 Email     Debug    Initiating log uploading
11:43:03 Email     Debug    Initiating log uploading
11:44:03 Email     Debug    Initiating log uploading
11:45:03 Email     Debug    Initiating log uploading
11:46:03 Email     Debug    Initiating log uploading
11:47:03 Email     Debug    Initiating log uploading
11:48:03 Email     Debug    Initiating log uploading
11:49:03 Email     Debug    Initiating log uploading
11:50:03 Email     Debug    Initiating log uploading
11:51:03 Email     Debug    Initiating log uploading
11:52:03 Email     Debug    Initiating log uploading
11:53:03 Email     Debug    Initiating log uploading
11:54:03 Email     Debug    Initiating log uploading
11:55:03 Email     Debug    Initiating log uploading
11:56:03 Email     Debug    Initiating log uploading
11:57:03 Email     Debug    Initiating log uploading
11:58:03 Email     Debug    Initiating log uploading
11:59:03 Email     Debug    Initiating log uploading
12:00:03 Email     Debug    Initiating log uploading
12:01:03 Email     Debug    Initiating log uploading
12:02:03 Email     Debug    Initiating log uploading
12:03:03 Email     Debug    Initiating log uploading
12:04:03 Email     Debug    Initiating log uploading
12:05:03 Email     Debug    Initiating log uploading
12:06:03 Email     Debug    Initiating log uploading
12:07:03 Email     Debug    Initiating log uploading
12:08:03 Email     Debug    Initiating log uploading
12:09:03 Email     Debug    Initiating log uploading
12:10:03 Email     Debug    Initiating log uploading
12:11:03 Email     Debug    Initiating log uploading
12:12:03 Email     Debug    Initiating log uploading
12:13:03 Email     Debug    Initiating log uploading
12:14:03 Email     Debug    Initiating log uploading
12:15:03 Email     Debug    Initiating log uploading
12:16:03 Email     Debug    Initiating log uploading
12:17:03 Email     Debug    Initiating log uploading
12:18:03 Email     Debug    Initiating log uploading
12:19:03 Email     Debug    Initiating log uploading
12:20:03 Email     Debug    Initiating log uploading
12:20:43 Email     Verbose    Connection accepted
12:20:43 Email     Debug    Queueing socket 0x61C for worker
12:20:43 Email     Debug    Socket 0x61C dequeued by worker
12:20:43 Email     Debug    Received OIPCINIT
12:20:43 Email     Debug    >> PGPocInitIndirectSession
12:20:43 Email     Debug    Session-type: LSP
12:20:43 Email     Debug    Email proxying disabled
12:20:43 Email     Error    Cannot proxy process 4540 due to insufficient privileges.  Process may be a service.
12:20:43 Email     Debug    << PGPocInitIndirectSession, failed
12:20:43 Email     Debug    PGPocInitIndirectSession failed
12:20:43 Email     Debug    Sending OIPCINITRESP
12:20:43 Email     Debug    Closed client socket: 0x61C
12:21:03 Email     Debug    Initiating log uploading
12:22:03 Email     Debug    Initiating log uploading
12:22:03 PGP     Info    Sending logging data to configuration server
12:22:16 Email     Debug    >> PGPocTrayLoadPrefsData
12:22:16 Email     Debug    << PGPocTrayLoadPrefsData
12:22:22 Email     Debug    >> PGPocTrayLoadPrefsData
12:22:22 Email     Debug    << PGPocTrayLoadPrefsData
12:28:03 Email     Debug    Initiating log uploading
12:29:03 Email     Debug    Initiating log uploading
12:30:03 Email     Debug    Initiating log uploading
12:31:03 Email     Debug    Initiating log uploading
12:32:03 Email     Debug    Initiating log uploading
12:32:15 Email     Debug    >> PGPocTrayLoadPrefsData
12:32:15 Email     Debug    << PGPocTrayLoadPrefsData
12:32:22 Email     Debug    >> PGPocTrayLoadPrefsData
12:32:22 Email     Debug    << PGPocTrayLoadPrefsData
12:33:03 Email     Debug    Initiating log uploading
12:34:03 Email     Debug    Initiating log uploading
12:35:03 Email     Debug    Initiating log uploading
12:36:03 Email     Debug    Initiating log uploading
12:37:03 Email     Debug    Initiating log uploading
12:38:03 Email     Debug    Initiating log uploading
12:39:03 Email     Debug    Initiating log uploading
12:40:03 Email     Debug    Initiating log uploading
12:41:03 Email     Debug    Initiating log uploading

 

 

--------------------------------------------------------------------------------------------------------------------------------------------

Log 2:13:49:38            ----- PGP Desktop started -----
13:49:38            PGP Desktop 10.2.0 (Build 2599) (2599)
13:49:38            Today's date is Tuesday, April 09, 2013
13:49:39 PGP     Info    Setting logging level to: normal
13:49:42 Email     Info    Creating new account list entry for 10.10.110.125
13:49:42 PGP     Info    Initiating daily maintenance procedures
13:59:45            ----- PGP Desktop started -----
13:59:45            PGP Desktop 10.2.0 (Build 2599) (2599)
13:59:45            Today's date is Tuesday, April 09, 2013
13:59:46 PGP     Info    Setting logging level to: 0xF3F
13:59:46 Email     Debug    >> PGPocTrayLoadAccountData
13:59:46 Email     Debug    << PGPocTrayLoadAccountData
13:59:46 Email     Debug    << PGPocTrayLoadPrefsData
13:59:46 Email     Debug    << PGPocInitApplication
13:59:46 Email     Debug    >> PGPocInitThreads
13:59:46 Email     Verbose    Listening on port 33333
13:59:46 Email     Debug    >> PGPocInitializeWorkerThreads
13:59:46 Email     Debug    << PGPocInitializeWorkerThreads
13:59:46 PGP     Verbose    Worker threads started
13:59:46 Email     Verbose    Connection accepted
13:59:46 Email     Debug    Queueing socket 0x57C for worker
13:59:46 Email     Debug    Socket 0x57C dequeued by worker
13:59:46 Email     Debug    Received OIPCINIT
13:59:46 Email     Debug    >> PGPocInitIndirectSession
13:59:46 Email     Debug    Session-type: LSP
13:59:46 Email     Debug    Don't proxy ourselves
13:59:46 Email     Debug    Not redirecting LSP session
13:59:46 Email     Debug    << PGPocInitIndirectSession
13:59:46 Email     Debug    PGPocInitIndirectSession succeeded
13:59:46 Email     Debug    Sending OIPCINITRESP
13:59:46 Email     Debug    Closed client socket: 0x57C
13:59:47 Email     Debug    << PGPocInitThreads
13:59:47 Email     Debug    Token thread successfully loaded PKCS11 driver ''
13:59:47 Email     Debug    Starting initialization procedure
13:59:47 Email     Debug    >> PGPocTrayLoadPrefsData
13:59:47 Email     Debug    << PGPocTrayLoadPrefsData
13:59:49 Email     Verbose    Looking for account data for mail server lsi-qwest-pgp.laserspineinstitute.com; PGP server lsi-qwest-pgp.laserspineinstitute.com; user (null); and address (null)
13:59:49 Email     Verbose    Found existing service for messaging server lsi-qwest-pgp.laserspineinstitute.com
13:59:49 Email     Verbose    Existing entry is (untitled)
13:59:49 Email     Debug    >> PGPocTrayCacheAccountPassphrases
13:59:49 Email     Debug    << PGPocTrayCacheAccountPassphrases
13:59:49 Email     Debug    >> PGPocOvidServerSyncWithConfigServer
13:59:49 Email     Debug    << PGPocOvidServerSyncWithConfigServer
13:59:49 PGP     Info    Initiating daily maintenance procedures
13:59:58 PGP     Error    Certificate Enrollment has failed with error: Smart card not found (-10844)
13:59:59 Email     Debug    Initiating enrollment
13:59:59 Email     Debug    >> PGPocOvidServerSyncWithConfigServer
13:59:59 PGP     Info    Beginning synchronization with configuration server lsi-qwest-pgp.laserspineinstitute.com
13:59:59 Email     Debug    >> sServerGetPrefs
13:59:59 Email     Debug    >> PGPocTrayStoreAccountData
13:59:59 Email     Debug    << PGPocTrayStoreAccountData
13:59:59 Email     Debug    << sServerGetPrefs
13:59:59 Email     Verbose    Attempting to download user policy from lsi-qwest-pgp.laserspineinstitute.com
13:59:59 Email     Debug    >> PGPocTrayStoreAccountData
14:00:00 Email     Debug    << PGPocTrayStoreAccountData
14:00:00 Email     Debug    >> sServerGetUpdateInfo
14:00:00 Email     Debug    >> sGetPolicyListFromOvidServerV25
14:00:00 Email     Debug    Retrieved XML policies from server
14:00:00 Email     Debug    >> PGPocTrayStoreAccountData
14:00:00 Email     Debug    << PGPocTrayStoreAccountData
14:00:00 Email     Debug    << sGetPolicyListFromOvidServerV25
14:00:00 PGP     Info    Completed synchronization with configuration server lsi-qwest-pgp.laserspineinstitute.com
14:00:00 Email     Debug    << PGPocOvidServerSyncWithConfigServer
14:00:01 Email     Debug    >> OCKeySetupSetup
14:00:01 Email     Debug    >> sFindDataForConfigServer
14:00:01 Email     Verbose    Looking for account data for mail server lsi-qwest-pgp.laserspineinstitute.com; PGP server lsi-qwest-pgp.laserspineinstitute.com; user (null); and address (null)
14:00:01 Email     Verbose    Found existing service for messaging server lsi-qwest-pgp.laserspineinstitute.com
14:00:01 Email     Verbose    Existing entry is (untitled)
14:00:01 Email     Debug    << sFindDataForConfigServer
14:00:01 Email     Debug    >> PGPocOvidServerSyncWithConfigServer
14:00:01 PGP     Info    Beginning synchronization with configuration server lsi-qwest-pgp.laserspineinstitute.com
14:00:01 Email     Debug    >> sServerGetPrefs
14:00:01 Email     Debug    >> PGPocTrayStoreAccountData
14:00:01 Email     Debug    << PGPocTrayStoreAccountData
14:00:01 Email     Debug    << sServerGetPrefs
14:00:01 Email     Verbose    Attempting to download user policy from lsi-qwest-pgp.laserspineinstitute.com
14:00:01 Email     Debug    Looking for key orgKeyID with id 0x916669391C2391E6
14:00:01 Email     Debug    Found keyblock orgKeyBlock
14:00:01 Email     Debug    Found key 0x916669391C2391E6
14:00:01 Email     Debug    >> PGPocTrayStoreAccountData
14:00:02 Email     Debug    << PGPocTrayStoreAccountData
14:00:02 Email     Debug    >> PGPocTrayStoreAccountData
14:00:02 Email     Debug    << PGPocTrayStoreAccountData
14:00:02 Email     Debug    << PGPocOvidServerSyncWithConfigServer
14:00:02 Email     Debug    >> PGPocTrayReloadLocalKeys
14:00:02 Email     Debug    >> PGPocTrayLoadLocalKeys
14:00:02 Email     Debug    << PGPocTrayLoadLocalKeys
14:00:02 Email     Debug    << PGPocTrayReloadLocalKeys
14:00:02 Email     Debug    >> OCEnsurePrivateKey
14:00:02 Email     Debug    >> PGPocOvidServerGetLDAPUserInfo
14:00:02 Email     Debug    >> sSoapContextForThread
14:00:02 Email     Debug    << sSoapContextForThread, context already created
14:00:02 Email     Debug    >> PGPocTrayStoreAccountData
14:00:02 Email     Debug    << PGPocTrayStoreAccountData
14:00:02 Email     Debug    << PGPocOvidServerGetLDAPUserInfo
14:00:02 Email     Debug    Private key sought apart from any MIME msg for (unnamed) <(unknown)>
14:00:02 Email     Debug    In SKM mode
14:00:02 Email     Debug    Initializing, or working with an EOS
14:00:02 Email     Debug    >> PGPocOvidServerGetPrivateKey
14:00:02 Email     Debug    >> PGPocOvidServerGetOurKey
14:00:02 Email     Debug    >> sSoapContextForThread
14:00:02 Email     Debug    << sSoapContextForThread, context already created
14:00:02 Email     Verbose    Attempting to download our key from lsi-qwest-pgp.laserspineinstitute.com
14:00:02 Email     Debug    Successfully downloaded key
14:00:02 Email     Debug    >> PGPocTraySaveKeyToLocalKeyring
14:00:02 Email     Debug    >> PGPocTrayLoadLocalKeys
14:00:02 Email     Debug    << PGPocTrayLoadLocalKeys
14:00:02 Email     Debug    << PGPocTraySaveKeyToLocalKeyring
14:00:02 Email     Debug    >> PGPocTrayReloadLocalKeys
14:00:02 Email     Debug    >> PGPocTrayLoadLocalKeys
14:00:02 Email     Debug    << PGPocTrayLoadLocalKeys
14:00:02 Email     Debug    << PGPocTrayReloadLocalKeys
14:00:02 Email     Debug    << PGPocOvidServerGetOurKey
14:00:02 Email     Verbose    Downloaded SKM key 0x34B257A0 from lsi-qwest-pgp.laserspineinstitute.com
14:00:02 Email     Debug    Holding onto downloaded private key. Worker's keydb has 0 keys
14:00:02 Email     Debug    After copy worker's keydb has 1 keys
14:00:02 Email     Debug    >> PGPocAccountStoreWorkerPrivateKey
14:00:02 Email     Debug    >> PGPocTrayStoreAccountData
14:00:03 Email     Debug    << PGPocTrayStoreAccountData
14:00:03 Email     Debug    << PGPocAccountStoreWorkerPrivateKey
14:00:03 Email     Debug    >> PGPocTrayMergeKeyToLocalKeyring
14:00:03 Email     Debug    << PGPocTrayMergeKeyToLocalKeyring, SKM short-circuit
14:00:03 Email     Debug    << PGPocOvidServerGetPrivateKey
14:00:03 Email     Debug    << OCEnsurePrivateKey
14:00:03 Email     Verbose    Organization key 0x916669391C2391E6 specified by server
14:00:03 Email     Debug    << OCKeySetupSetup
14:00:04 WDE     Info    User jalway added WDE user DACU to DiskGroup 31966823-ce4b-45af-8c1f-6bfa16a93920
14:00:04 WDE     Info    User WDE_SYSTEM added WDE user WDE Administrator to DiskGroup 31966823-ce4b-45af-8c1f-6bfa16a93920
14:00:04 WDE     Info    Updated WDRT for DiskGroup: 31966823-ce4b-45af-8c1f-6bfa16a93920
14:00:04 WDE     Info    User jalway started encryption on disk C:\ WDC WD3200BEKT-75PVMT1 on machine LT2393 at 2013/04/09 14:00:04.000694
14:00:05 Email     Debug    >> PGPocTrayReloadLocalKeys
14:00:05 Email     Debug    >> PGPocTrayLoadLocalKeys
14:00:05 Email     Debug    << PGPocTrayLoadLocalKeys
14:00:05 Email     Debug    << PGPocTrayReloadLocalKeys
14:00:05 Email     Debug    >> PGPocTrayLoadPrefsData
14:00:05 Email     Warning    Email proxying has been disabled by the user
14:00:05 Email     Debug    << PGPocTrayLoadPrefsData
14:00:06 Email     Debug    >> PGPocTrayLoadPrefsData
14:00:06 Email     Debug    << PGPocTrayLoadPrefsData
14:00:06 Email     Debug    >> PGPocTrayLoadPrefsData
14:00:06 Email     Debug    << PGPocTrayLoadPrefsData
14:00:06 Email     Debug    >> PGPocTrayLoadPrefsData
14:00:06 Email     Debug    << PGPocTrayLoadPrefsData
14:00:06 Email     Debug    >> PGPocTrayLoadPrefsData
14:00:06 Email     Debug    << PGPocTrayLoadPrefsData
14:00:06 Email     Debug    >> PTOCHandlePolicyChange
14:00:06 Email     Debug    >> PGPocTrayLoadPrefsData
14:00:06 Email     Debug    >> PGPocTrayLoadAccountData
14:00:06 Email     Debug    << PGPocTrayLoadAccountData
14:00:06 Email     Debug    << PGPocTrayLoadPrefsData
14:00:06 Email     Debug    << PTOCHandlePolicyChange
14:00:06 Email     Debug    >> PGPocTrayLoadPrefsData
14:00:06 Email     Debug    << PGPocTrayLoadPrefsData
14:00:06 Email     Debug    >> PGPocTrayReloadLocalKeys
14:00:06 Email     Debug    >> PGPocTrayLoadLocalKeys
14:00:06 Email     Debug    << PGPocTrayLoadLocalKeys
14:00:06 Email     Debug    << PGPocTrayReloadLocalKeys
14:00:06 Email     Debug    >> PGPocTrayLoadPrefsData
14:00:06 Email     Debug    << PGPocTrayLoadPrefsData
14:00:06 WDE     Info    Whole Disk Operation has started. Computer is on AC power.
14:00:06 NetShare     Verbose    Policy update initiated
14:00:06 NetShare     Verbose    Custom location-based Blacklist: no items
14:00:06 NetShare     Verbose    Location-based Whitelist: no items
14:00:06 NetShare     Verbose    Custom app-based Blacklist: no items
14:00:06 NetShare     Verbose    App-based Whitelist: no items
14:00:13 Email     Debug    >> PGPocTrayLoadPrefsData
14:00:13 Email     Debug    << PGPocTrayLoadPrefsData
14:00:15 Email     Debug    >> PGPocTrayLoadPrefsData
14:00:15 Email     Debug    << PGPocTrayLoadPrefsData
14:01:25 Email     Debug    >> PGPocTrayPurgePassphraseCache
14:01:25 Email     Debug    << PGPocTrayPurgePassphraseCache
14:04:05            ----- PGP Desktop started -----
14:04:05            PGP Desktop 10.2.0 (Build 2599) (2599)
14:04:05            Today's date is Tuesday, April 09, 2013
14:04:05 Email     Warning    Email proxying has been disabled by the user
14:04:05 PGP     Info    Setting logging level to: 0xF3F
14:04:05 Email     Debug    >> PGPocTrayLoadAccountData
14:04:05 Email     Debug    << PGPocTrayLoadAccountData
14:04:05 Email     Debug    << PGPocTrayLoadPrefsData
14:04:05 Email     Debug    << PGPocInitApplication
14:04:05 Email     Warning    Email proxying has been disabled by the user
14:04:05 Email     Debug    >> PGPocInitThreads
14:04:05 Email     Verbose    Listening on port 33333
14:04:05 Email     Debug    >> PGPocInitializeWorkerThreads
14:04:05 Email     Debug    << PGPocInitializeWorkerThreads
14:04:05 PGP     Verbose    Worker threads started
14:04:06 Email     Verbose    Connection accepted
14:04:06 Email     Debug    Queueing socket 0x568 for worker
14:04:06 Email     Debug    Socket 0x568 dequeued by worker
14:04:06 Email     Debug    Received OIPCINIT
14:04:06 Email     Debug    >> PGPocInitIndirectSession
14:04:06 Email     Debug    Session-type: LSP
14:04:06 Email     Debug    Don't proxy ourselves
14:04:06 Email     Debug    Not redirecting LSP session
14:04:06 Email     Debug    << PGPocInitIndirectSession
14:04:06 Email     Debug    PGPocInitIndirectSession succeeded
14:04:06 Email     Debug    Sending OIPCINITRESP
14:04:06 Email     Debug    Closed client socket: 0x568
14:04:07 Email     Debug    << PGPocInitThreads
14:04:07 Email     Debug    Token thread successfully loaded PKCS11 driver ''
14:04:07 Email     Debug    Starting initialization procedure
14:04:07 Email     Debug    >> PGPocTrayLoadPrefsData
14:04:07 Email     Debug    << PGPocTrayLoadPrefsData
14:04:08 WDE     Info    User WDE_SYSTEM added WDE user jalway to DiskGroup 31966823-ce4b-45af-8c1f-6bfa16a93920
14:04:08 Email     Debug    >> PGPocTrayLoadPrefsData
14:04:08 Email     Debug    << PGPocTrayLoadPrefsData
14:04:08 Email     Debug    >> PGPocTrayLoadPrefsData
14:04:08 Email     Debug    << PGPocTrayLoadPrefsData
14:04:09 Email     Debug    >> PGPocTrayLoadPrefsData
14:04:09 Email     Debug    << PGPocTrayLoadPrefsData
14:04:09 Email     Verbose    Looking for account data for mail server lsi-qwest-pgp.laserspineinstitute.com; PGP server lsi-qwest-pgp.laserspineinstitute.com; user (null); and address (null)
14:04:09 Email     Verbose    Found existing service for messaging server lsi-qwest-pgp.laserspineinstitute.com
14:04:09 Email     Verbose    Existing entry is (untitled)
14:04:09 Email     Debug    >> PGPocTrayCacheAccountPassphrases
14:04:09 Email     Debug    << PGPocTrayCacheAccountPassphrases
14:04:09 Email     Debug    >> PGPocOvidServerSyncWithConfigServer
14:04:09 Email     Debug    >> PGPocTrayPurgePassphraseCache
14:04:09 Email     Debug    >> PGPocTrayLoadLocalKeys
14:04:09 Email     Debug    << PGPocTrayLoadLocalKeys
14:04:09 Email     Debug    << PGPocTrayPurgePassphraseCache
14:04:09 Email     Debug    >> PGPocTrayPurgePassphraseCache
14:04:09 Email     Debug    >> PGPocTrayLoadLocalKeys
14:04:09 Email     Debug    << PGPocTrayLoadLocalKeys
14:04:09 Email     Debug    << PGPocTrayPurgePassphraseCache
14:04:09 PGP     Info    Beginning synchronization with configuration server lsi-qwest-pgp.laserspineinstitute.com
14:04:09 Email     Debug    >> sServerGetPrefs
14:04:09 Email     Debug    >> PGPocTrayStoreAccountData
14:04:09 Email     Debug    << PGPocTrayStoreAccountData
14:04:09 Email     Debug    << sServerGetPrefs
14:04:09 Email     Verbose    Attempting to download user policy from lsi-qwest-pgp.laserspineinstitute.com
14:04:09 Email     Debug    Looking for key orgKeyID with id 0x916669391C2391E6
14:04:09 Email     Debug    Found keyblock orgKeyBlock
14:04:09 Email     Debug    Found key 0x916669391C2391E6
14:04:09 Email     Debug    >> PGPocTrayStoreAccountData
14:04:10 Email     Debug    << PGPocTrayStoreAccountData
14:04:10 NetShare     Verbose    Policy update initiated
14:04:10 NetShare     Verbose    Custom location-based Blacklist: no items
14:04:10 NetShare     Verbose    Location-based Whitelist: no items
14:04:10 NetShare     Verbose    Custom app-based Blacklist: no items
14:04:10 NetShare     Verbose    App-based Whitelist: no items
14:04:10 Email     Debug    >> PGPocTrayStoreAccountData
14:04:10 Email     Debug    >> PGPocTrayLoadPrefsData
14:04:10 Email     Debug    << PGPocTrayStoreAccountData
14:04:10 Email     Debug    >> sServerGetUpdateInfo
14:04:10 Email     Debug    << PGPocTrayLoadPrefsData
14:04:10 Email     Debug    << sServerGetUpdateInfo
14:04:10 Email     Debug    >> sGetPolicyListFromOvidServerV25
14:04:10 Email     Debug    Retrieved XML policies from server
14:04:10 Email     Debug    >> PGPocTrayStoreAccountData
14:04:10 WDE     Info    User jalway used a WDRT on disk C:\ WDC WD3200BEKT-75PVMT1 on machine LT2393 at 2013/04/09 14:04:10.000595
14:04:10 Email     Debug    << PGPocTrayStoreAccountData
14:04:10 Email     Debug    << sGetPolicyListFromOvidServerV25
14:04:10 PGP     Info    Completed synchronization with configuration server lsi-qwest-pgp.laserspineinstitute.com
14:04:10 Email     Debug    << PGPocOvidServerSyncWithConfigServer
14:04:11 PGP     Info    Initiating daily maintenance procedures
14:04:11 Email     Debug    >> PGPocTrayLoadPrefsData
14:04:11 Email     Debug    << PGPocTrayLoadPrefsData
14:04:11 Email     Debug    >> PGPocTrayLoadPrefsData
14:04:11 Email     Debug    << PGPocTrayLoadPrefsData
14:04:12 Email     Debug    >> PGPocAccountMaintenance1
14:04:12 Email     Debug    << PGPocAccountMaintenance1
14:04:12 Email     Debug    >> PGPocTrayKeyringMaintenance
14:04:12 Email     Debug    << PGPocTrayKeyringMaintenance
14:04:12 Email     Debug    >> PGPocAccountMaintenance2
14:04:12 Email     Debug    << PGPocAccountMaintenance2
14:04:12 Email     Debug    >> PGPocTrayLoadPrefsData
14:04:12 Email     Debug    << PGPocTrayLoadPrefsData
14:04:13 WDE     Info    Whole Disk Operation has started. Computer is on AC power.
14:04:18 Email     Debug    >> PGPocTrayLoadPrefsData
14:04:18 Email     Debug    << PGPocTrayLoadPrefsData

Jeff_LSI's picture

So even I can see in those logs where the currently logged in user isn't adding the currently logged in user to the diskgroup, but I have no idea why. But, as you can see in the last log, if I log out, and log back in, WDE_System adds the user.

 

14:00:04 WDE     Info    User jalway added WDE user DACU to DiskGroup 31966823-ce4b-45af-8c1f-6bfa16a93920
14:00:04 WDE     Info    User WDE_SYSTEM added WDE user WDE Administrator to DiskGroup 31966823-ce4b-45af-8c1f-6bfa16a93920
14:00:04 WDE     Info    Updated WDRT for DiskGroup: 31966823-ce4b-45af-8c1f-6bfa16a93920
14:00:04 WDE     Info    User jalway started encryption on disk C:\ WDC WD3200BEKT-75PVMT1 on machine LT2393 at 2013/04/09 14:00:04.000694

 

14:04:08 WDE     Info    User WDE_SYSTEM added WDE user jalway to DiskGroup 31966823-ce4b-45af-8c1f-6bfa16a93920

PGP_Ben's picture

A couple things that I would recommend on this, sorry to be coming into the picture late in the game here if you don't mind...

1) I noticed this error:

14:07:11 PGP     Error    Certificate Enrollment has failed with error: Smart card not found (-10844)

This indicates that it's first trying to enroll you with an x509 certificate issued by your AD server. So I would check your directory sync settings to make sure that certificate enrollment is set to DENY.

I have seen quirky behavior with having this enabled and not actually using the function.

2) Have you tested with a more current release of the Desktop client? 10.2.0 MP5 (Build 2599) did have some known Single Sign On issues which were addressed with more recent builds. Current version of Desktop client is 10.3.0 MP1 today.  I know that may sound dumb, but the Invisible Silent Enrollment feature is reliant on Single Sign on functioning correctly and adding the AD user to the disk

3) I can assume that you have your directory sync settings configured to use AD on the backend and not another directory such as Open LDAP (Not supported for invisible silent enrollment).

If you wouldn't mind posting a copy of your pgpssolog.txt file found under c:\windows\temp (prior to the user failing to get added to the disk) and then also afterwards. That would be great, you can strip out information you feel is not secure. I'm fine with that.

4) What is your policy for Single Sign On for Drive Encryption set to? This is the policy option right above the one that you check to automatically encrypt the boot drive.  I would make sure it's set to FORCE with invisible silent enrollment. This always forces the drive encryption to add the SSO user to the disk before starting the encryption.  Also, make sure that the "automatically encrypt the boot disk" option shows to a standard passphrase and not something like a smart card, usb token, etc.

Best of luck!

If/when you consider your issue resolved, please click Mark As Solution on the most helpful response.

PGP_Ben's picture

BTW, this sounds exactly like this other issue that Sven already solved (possibly related to that AutoAddWDEUsers preference (in the UI on the server this the same thing as that "FORCE SSO" option.

See the solution:

https://www-secure.symantec.com/connect/forums/pgp...

 

If/when you consider your issue resolved, please click Mark As Solution on the most helpful response.

Jeff_LSI's picture

Hi Ben,

Thanks for jumping in.

I followed the direction indicated from Sven. The xml file now reflects the information in his screenshot after I added the line. This did not yield any different results unfortunately. In response to your other questions:

1. I went ahead and changed certifcate enrollment to deny.

2. I have not tested with any other version. I was actually having some difficulty locating documentation for trying an updated version/publishing to pgp enrollment server for deployment. If you could link me to an article I would appreciate it.

3.Correct directory sync is on with our AD server. It pulls the right info to add to WDE users list after the second login, so I think its seeing the server ok. Just, if you forget to log out and login twice after initial silent enrollment, you're screwed because you can't get past bootguard.

3. Here is the log from pgpssolog. I actually pulled this after restarting, but before trusting the certificate that I was presented with. After I accepted it, automatic encryption began. I checked the log again and it was identicle, so it almost seems like I'm not pulling the log soon enough. But the log doesn't exist prior to restart, so I'm a bit confused about that.

 

SSO Enrollment Log
Passed PGP_INSTALL_DISABLESSOENROLL registry check
Attempting to impersonate user...
Username is *DACU* on domain *LASERSPINE*.
NetGetAnyDCName *\\our domain server*.
NetUserGetInfo *\\our domain server* *DACU*.
LoadUserProfile *\\our domain server* *DACU* **.
Impersonate user OK!
Passed impersonation
Saving SSO password...
Universal server: lsi-qwest-pgp.laserspineinstitute.com
Created user app data folder: C:\Users\DACU\AppData\Roaming\PGP Corporation\PGP\
Common app data folder: C:\ProgramData\PGP Corporation\PGP\
PGPtrustedcerts.asc path: C:\ProgramData\PGP Corporation\PGP\PGPtrustedcerts.asc
orgkey.asc path: C:\ProgramData\PGP Corporation\PGP\orgkey.asc
PGPsso.dat path: C:\Users\DACU\AppData\Roaming\PGP Corporation\PGP\PGPsso.dat
PGPprefs.xml path: C:\Users\DACU\AppData\Roaming\PGP Corporation\PGP\PGPprefs.xml
Deleting old PGPsso.dat file.
Non-fatal error: Pref file doesn't exist
Using orgkey.asc.
PGPFilterKeySet found 1 keys that matched
sFilterForEncryptKeys found 1 keys that matched
Success: Writing out data!

I still don't understand why pgp thinks the currently logged in user is dacu, as indicated here:Username is *DACU* on domain *domain*.

When in truth, its "jalway"

 

4. This was set to force as you indicated. Same results unfortunately.

Jeff_LSI's picture

Oh, and heres another log from pgp desktop. A little bit more info since I added the keys prior to restart.

 

15:56:40            ----- PGP Desktop started -----
15:56:40            PGP Desktop 10.2.0 (Build 2599) (2599)
15:56:40            Today's date is Monday, April 15, 2013
15:56:43 PGP     Info    Setting logging level to: 0xF3F
15:56:43 Email     Debug    >> PGPocTrayLoadAccountData
15:56:43 Email     Debug    << PGPocTrayLoadAccountData
15:56:43 Email     Debug    << PGPocTrayLoadPrefsData
15:56:43 Email     Debug    << PGPocInitApplication
15:56:43 Email     Debug    >> PGPocInitThreads
15:56:43 Email     Verbose    Listening on port 33333
15:56:43 Email     Debug    >> PGPocInitializeWorkerThreads
15:56:43 Email     Debug    << PGPocInitializeWorkerThreads
15:56:43 PGP     Verbose    Worker threads started
15:56:44 Email     Verbose    Connection accepted
15:56:44 Email     Debug    Queueing socket 0x640 for worker
15:56:44 Email     Debug    Socket 0x640 dequeued by worker
15:56:44 Email     Debug    Received OIPCINIT
15:56:44 Email     Debug    >> PGPocInitIndirectSession
15:56:44 Email     Debug    Session-type: LSP
15:56:44 Email     Debug    Don't proxy ourselves
15:56:44 Email     Debug    Not redirecting LSP session
15:56:44 Email     Debug    << PGPocInitIndirectSession
15:56:44 Email     Debug    PGPocInitIndirectSession succeeded
15:56:44 Email     Debug    Sending OIPCINITRESP
15:56:44 Email     Debug    Closed client socket: 0x640
15:56:45 Email     Debug    << PGPocInitThreads
15:56:45 Email     Debug    Token thread successfully loaded PKCS11 driver ''
15:56:45 Email     Debug    Starting initialization procedure
15:56:45 Email     Debug    >> PGPocTrayLoadPrefsData
15:56:45 Email     Debug    << PGPocTrayLoadPrefsData
15:56:47 Email     Verbose    Looking for account data for mail server lsi-qwest-pgp.laserspineinstitute.com; PGP server lsi-qwest-pgp.laserspineinstitute.com; user (null); and address (null)
15:56:47 Email     Info    Creating new account list entry for 10.10.110.125
15:56:47 Email     Debug    >> PGPocTrayStoreAccountData
15:56:47 Email     Debug    << PGPocTrayStoreAccountData
15:56:47 Email     Debug    >> PGPocTrayCacheAccountPassphrases
15:56:47 Email     Debug    << PGPocTrayCacheAccountPassphrases
15:56:47 Email     Debug    >> PGPocOvidServerSyncWithConfigServer
15:56:47 Email     Debug    << PGPocOvidServerSyncWithConfigServer
15:56:47 PGP     Info    Initiating daily maintenance procedures
15:58:15 Email     Debug    Initiating enrollment
15:58:15 Email     Debug    >> PGPocOvidServerSyncWithConfigServer
15:58:15 PGP     Info    Beginning synchronization with configuration server lsi-qwest-pgp.laserspineinstitute.com
15:58:15 Email     Debug    >> sServerGetPrefs
15:58:15 Email     Debug    >> PGPocTrayStoreAccountData
15:58:16 Email     Debug    << PGPocTrayStoreAccountData
15:58:16 Email     Debug    << sServerGetPrefs
15:58:16 Email     Verbose    Attempting to download user policy from lsi-qwest-pgp.laserspineinstitute.com
15:58:16 Email     Debug    >> PGPocTrayStoreAccountData
15:58:16 Email     Debug    << PGPocTrayStoreAccountData
15:58:16 Email     Debug    >> sServerGetUpdateInfo
15:58:16 Email     Debug    >> sGetPolicyListFromOvidServerV25
15:58:16 Email     Debug    Retrieved XML policies from server
15:58:16 Email     Debug    >> PGPocTrayStoreAccountData
15:58:16 Email     Debug    << PGPocTrayStoreAccountData
15:58:16 Email     Debug    << sGetPolicyListFromOvidServerV25
15:58:17 PGP     Info    Completed synchronization with configuration server lsi-qwest-pgp.laserspineinstitute.com
15:58:17 Email     Debug    << PGPocOvidServerSyncWithConfigServer
15:58:18 Email     Debug    >> OCKeySetupSetup
15:58:18 Email     Debug    >> sFindDataForConfigServer
15:58:18 Email     Verbose    Looking for account data for mail server lsi-qwest-pgp.laserspineinstitute.com; PGP server lsi-qwest-pgp.laserspineinstitute.com; user (null); and address (null)
15:58:18 Email     Verbose    Found existing service for messaging server lsi-qwest-pgp.laserspineinstitute.com
15:58:18 Email     Verbose    Existing entry is (untitled)
15:58:18 Email     Debug    << sFindDataForConfigServer
15:58:18 Email     Debug    >> PGPocOvidServerSyncWithConfigServer
15:58:18 PGP     Info    Beginning synchronization with configuration server lsi-qwest-pgp.laserspineinstitute.com
15:58:18 Email     Debug    >> sServerGetPrefs
15:58:18 Email     Debug    >> PGPocTrayStoreAccountData
15:58:18 Email     Debug    << PGPocTrayStoreAccountData
15:58:18 Email     Debug    << sServerGetPrefs
15:58:18 Email     Verbose    Attempting to download user policy from lsi-qwest-pgp.laserspineinstitute.com
15:58:18 Email     Debug    Looking for key orgKeyID with id 0x916669391C2391E6
15:58:18 Email     Debug    Found keyblock orgKeyBlock
15:58:18 Email     Debug    Found key 0x916669391C2391E6
15:58:18 Email     Debug    >> PGPocTrayStoreAccountData
15:58:18 Email     Debug    << PGPocTrayStoreAccountData
15:58:18 Email     Debug    >> PGPocTrayStoreAccountData
15:58:18 Email     Debug    << PGPocTrayStoreAccountData
15:58:18 Email     Debug    << PGPocOvidServerSyncWithConfigServer
15:58:18 Email     Debug    >> PGPocTrayReloadLocalKeys
15:58:18 Email     Debug    >> PGPocTrayLoadLocalKeys
15:58:18 Email     Debug    << PGPocTrayLoadLocalKeys
15:58:18 Email     Debug    << PGPocTrayReloadLocalKeys
15:58:18 Email     Debug    >> OCEnsurePrivateKey
15:58:18 Email     Debug    >> PGPocOvidServerGetLDAPUserInfo
15:58:18 Email     Debug    >> sSoapContextForThread
15:58:18 Email     Debug    << sSoapContextForThread, context already created
15:58:18 Email     Debug    >> PGPocTrayStoreAccountData
15:58:19 Email     Debug    << PGPocTrayStoreAccountData
15:58:19 Email     Debug    << PGPocOvidServerGetLDAPUserInfo
15:58:19 Email     Debug    Private key sought apart from any MIME msg for (unnamed) <(unknown)>
15:58:19 Email     Debug    In SKM mode
15:58:19 Email     Debug    Initializing, or working with an EOS
15:58:19 Email     Debug    >> PGPocOvidServerGetPrivateKey
15:58:19 Email     Debug    >> PGPocOvidServerGetOurKey
15:58:19 Email     Debug    >> sSoapContextForThread
15:58:19 Email     Debug    << sSoapContextForThread, context already created
15:58:19 Email     Verbose    Attempting to download our key from lsi-qwest-pgp.laserspineinstitute.com
15:58:19 Email     Debug    Successfully downloaded key
15:58:19 Email     Debug    >> PGPocTraySaveKeyToLocalKeyring
15:58:19 Email     Debug    >> PGPocTrayLoadLocalKeys
15:58:19 Email     Debug    << PGPocTrayLoadLocalKeys
15:58:19 Email     Debug    << PGPocTraySaveKeyToLocalKeyring
15:58:19 Email     Debug    >> PGPocTrayReloadLocalKeys
15:58:19 Email     Debug    >> PGPocTrayLoadLocalKeys
15:58:19 Email     Debug    << PGPocTrayLoadLocalKeys
15:58:19 Email     Debug    << PGPocTrayReloadLocalKeys
15:58:19 Email     Debug    << PGPocOvidServerGetOurKey
15:58:19 Email     Verbose    Downloaded SKM key 0x34B257A0 from lsi-qwest-pgp.laserspineinstitute.com
15:58:19 Email     Debug    Holding onto downloaded private key. Worker's keydb has 0 keys
15:58:19 Email     Debug    After copy worker's keydb has 1 keys
15:58:19 Email     Debug    >> PGPocAccountStoreWorkerPrivateKey
15:58:19 Email     Debug    >> PGPocTrayStoreAccountData
15:58:19 Email     Debug    << PGPocTrayStoreAccountData
15:58:19 Email     Debug    << PGPocAccountStoreWorkerPrivateKey
15:58:19 Email     Debug    >> PGPocTrayMergeKeyToLocalKeyring
15:58:19 Email     Debug    << PGPocTrayMergeKeyToLocalKeyring, SKM short-circuit
15:58:19 Email     Debug    << PGPocOvidServerGetPrivateKey
15:58:19 Email     Debug    << OCEnsurePrivateKey
15:58:19 Email     Verbose    Organization key 0x916669391C2391E6 specified by server
15:58:19 Email     Debug    << OCKeySetupSetup
15:58:21 WDE     Info    User jalway added WDE user DACU to DiskGroup 7d62cfea-210c-4e98-83f2-0ed1d0947c8b
15:58:21 WDE     Info    User WDE_SYSTEM added WDE user WDE Administrator to DiskGroup 7d62cfea-210c-4e98-83f2-0ed1d0947c8b
15:58:21 WDE     Info    Updated WDRT for DiskGroup: 7d62cfea-210c-4e98-83f2-0ed1d0947c8b
15:58:21 WDE     Info    User jalway started encryption on disk C:\ WDC WD3200BEKT-75PVMT1 on machine LT2426 at 2013/04/15 15:58:21.000845
15:58:22 Email     Debug    >> PGPocTrayReloadLocalKeys
15:58:22 Email     Debug    >> PGPocTrayLoadLocalKeys
15:58:22 Email     Debug    << PGPocTrayLoadLocalKeys
15:58:22 Email     Debug    << PGPocTrayReloadLocalKeys
15:58:23 WDE     Info    Whole Disk Operation has started. Computer is on AC power.
15:58:23 Email     Debug    >> PGPocTrayLoadPrefsData
15:58:23 Email     Warning    Email proxying has been disabled by the user
15:58:23 Email     Debug    << PGPocTrayLoadPrefsData
15:58:23 Email     Debug    >> PGPocTrayLoadPrefsData
15:58:23 Email     Debug    << PGPocTrayLoadPrefsData
15:58:23 Email     Debug    >> PGPocTrayLoadPrefsData
15:58:23 Email     Debug    << PGPocTrayLoadPrefsData
15:58:23 Email     Debug    >> PGPocTrayLoadPrefsData
15:58:23 Email     Debug    << PGPocTrayLoadPrefsData
15:58:23 NetShare     Verbose    Policy update initiated
15:58:23 Email     Debug    >> PGPocTrayLoadPrefsData
15:58:23 Email     Debug    << PGPocTrayLoadPrefsData
15:58:23 NetShare     Verbose    Custom location-based Blacklist: no items
15:58:23 Email     Debug    >> PTOCHandlePolicyChange
15:58:23 Email     Debug    >> PGPocTrayLoadPrefsData
15:58:23 Email     Debug    >> PGPocTrayLoadAccountData
15:58:23 Email     Debug    << PGPocTrayLoadAccountData
15:58:23 Email     Debug    << PGPocTrayLoadPrefsData
15:58:23 Email     Debug    << PTOCHandlePolicyChange
15:58:23 NetShare     Verbose    Location-based Whitelist: no items
15:58:23 Email     Debug    >> PGPocTrayLoadPrefsData
15:58:23 Email     Debug    << PGPocTrayLoadPrefsData
15:58:23 NetShare     Verbose    Custom app-based Blacklist: no items
15:58:23 NetShare     Verbose    App-based Whitelist: no items
15:58:24 Email     Debug    >> PGPocTrayLoadPrefsData
15:58:24 Email     Debug    << PGPocTrayLoadPrefsData
15:58:32 Email     Debug    >> PGPocTrayLoadPrefsData
15:58:32 Email     Debug    << PGPocTrayLoadPrefsData
15:59:17 Email     Debug    >> PGPocTrayLoadPrefsData
15:59:17 Email     Debug    << PGPocTrayLoadPrefsData
15:59:22 Email     Debug    >> PGPocTrayLoadPrefsData
15:59:22 Email     Debug    << PGPocTrayLoadPrefsData
15:59:45 Email     Debug    Initiating log uploading
15:59:45 PGP     Info    Unable to send logging data to configuration server; will try later: connection not available (-11097)
15:59:45 Email     Debug    Initiating offline ovid test
16:00:45 Email     Debug    Initiating log uploading
16:01:45 Email     Debug    Initiating log uploading
16:02:45 Email     Debug    Initiating log uploading
16:02:55 Email     Debug    Server lsi-qwest-pgp.laserspineinstitute.com still not responding
16:03:45 Email     Debug    Initiating log uploading
16:04:45 Email     Debug    Initiating log uploading
16:05:45 Email     Debug    Initiating log uploading
16:05:56 Email     Debug    Server lsi-qwest-pgp.laserspineinstitute.com still not responding
16:06:45 Email     Debug    Initiating log uploading
16:07:45 Email     Debug    Initiating log uploading
16:08:45 Email     Debug    Initiating log uploading
16:09:06 Email     Debug    Server lsi-qwest-pgp.laserspineinstitute.com still not responding
16:09:45 Email     Debug    Initiating log uploading
16:10:45 Email     Debug    Initiating log uploading
16:11:45 Email     Debug    Initiating log uploading
16:12:16 Email     Debug    Server lsi-qwest-pgp.laserspineinstitute.com still not responding
16:12:45 Email     Debug    Initiating log uploading
16:13:45 Email     Debug    Initiating log uploading
16:14:45 Email     Debug    Initiating log uploading
16:15:17 Email     Debug    Server lsi-qwest-pgp.laserspineinstitute.com still not responding
16:15:45 Email     Debug    Initiating log uploading
16:16:45 Email     Debug    Initiating log uploading
16:17:45 Email     Debug    Initiating log uploading
16:18:27 Email     Debug    Server lsi-qwest-pgp.laserspineinstitute.com still not responding
16:18:45 Email     Debug    Initiating log uploading
16:19:45 Email     Debug    Initiating log uploading
16:20:45 Email     Debug    Initiating log uploading
16:21:37 Email     Debug    Server lsi-qwest-pgp.laserspineinstitute.com still not responding
16:21:45 Email     Debug    Initiating log uploading
16:22:45 Email     Debug    Initiating log uploading
16:23:45 Email     Debug    Initiating log uploading
16:24:38 Email     Debug    Server lsi-qwest-pgp.laserspineinstitute.com still not responding
16:24:45 Email     Debug    Initiating log uploading
16:25:46 Email     Debug    Initiating log uploading
16:26:46 Email     Debug    Initiating log uploading
16:27:46 Email     Debug    Initiating log uploading
16:27:48 Email     Debug    Server lsi-qwest-pgp.laserspineinstitute.com still not responding
16:28:46 Email     Debug    Initiating log uploading
16:29:46 Email     Debug    Initiating log uploading
16:30:46 Email     Debug    Initiating log uploading
16:30:58 Email     Debug    Server lsi-qwest-pgp.laserspineinstitute.com still not responding
16:31:46 Email     Debug    Initiating log uploading
16:32:46 Email     Debug    Initiating log uploading
16:33:46 Email     Debug    Initiating log uploading
16:34:08 Email     Debug    Server lsi-qwest-pgp.laserspineinstitute.com still not responding
16:34:46 Email     Debug    Initiating log uploading
16:35:46 Email     Debug    Initiating log uploading
16:36:46 Email     Debug    Initiating log uploading
16:37:09 Email     Debug    Server lsi-qwest-pgp.laserspineinstitute.com still not responding
16:37:46 Email     Debug    Initiating log uploading
16:38:46 Email     Debug    Initiating log uploading
16:39:46 Email     Debug    Initiating log uploading
16:40:19 Email     Debug    Server lsi-qwest-pgp.laserspineinstitute.com still not responding
16:40:46 Email     Debug    Initiating log uploading
16:41:46 Email     Debug    Initiating log uploading
16:42:46 Email     Debug    Initiating log uploading
16:43:29 Email     Debug    Server lsi-qwest-pgp.laserspineinstitute.com still not responding
16:43:46 Email     Debug    Initiating log uploading
16:44:46 Email     Debug    Initiating log uploading
16:45:46 Email     Debug    Initiating log uploading
16:46:30 Email     Debug    Server lsi-qwest-pgp.laserspineinstitute.com still not responding
16:46:46 Email     Debug    Initiating log uploading
16:47:46 Email     Debug    Initiating log uploading
16:48:46 Email     Debug    Initiating log uploading
16:49:40 Email     Debug    Server lsi-qwest-pgp.laserspineinstitute.com still not responding
16:49:46 Email     Debug    Initiating log uploading
16:50:46 Email     Debug    Initiating log uploading
16:51:46 Email     Debug    Initiating log uploading
16:52:46 Email     Debug    Initiating log uploading
16:52:50 Email     Debug    Server lsi-qwest-pgp.laserspineinstitute.com still not responding
16:53:46 Email     Debug    Initiating log uploading
16:54:46 Email     Debug    Initiating log uploading
16:55:46 Email     Debug    Initiating log uploading
16:55:51 Email     Debug    Server lsi-qwest-pgp.laserspineinstitute.com still not responding
16:56:46 Email     Debug    Initiating log uploading
16:57:46 Email     Debug    Initiating log uploading
16:58:46 Email     Debug    Initiating log uploading
16:59:01 Email     Debug    Server lsi-qwest-pgp.laserspineinstitute.com still not responding
16:59:46 Email     Debug    Initiating log uploading
17:00:46 Email     Debug    Initiating log uploading
17:01:46 Email     Debug    Initiating log uploading
17:02:11 Email     Debug    Server lsi-qwest-pgp.laserspineinstitute.com still not responding
17:02:46 Email     Debug    Initiating log uploading
17:03:21 Email     Info    Server lsi-qwest-pgp.laserspineinstitute.com is now responding
17:03:21 Email     Debug    Initiating log uploading
17:03:21 PGP     Info    Sending logging data to configuration server
17:03:34 Email     Debug    >> PGPocTrayLoadPrefsData
17:03:34 Email     Debug    << PGPocTrayLoadPrefsData
17:03:38 Email     Debug    >> PGPocTrayLoadPrefsData
17:03:38 Email     Debug    << PGPocTrayLoadPrefsData
17:03:42 Email     Debug    >> PGPocTrayLoadPrefsData
17:03:42 Email     Debug    << PGPocTrayLoadPrefsData
17:08:46 Email     Debug    Initiating log uploading
17:09:46 Email     Debug    Initiating log uploading
17:10:46 Email     Debug    Initiating log uploading
17:11:46 Email     Debug    Initiating log uploading
17:12:46 Email     Debug    Initiating log uploading
17:13:46 Email     Debug    Initiating log uploading
17:14:46 Email     Debug    Initiating log uploading

PGP_Ben's picture

is the user jalway not an administrator on the local machine?

If/when you consider your issue resolved, please click Mark As Solution on the most helpful response.

Jeff_LSI's picture

No, jalway is a local admin. Currently all domain users are local admins. That will be changing soon, but right now that is not a problem. I installed the program using that same user.

PGP_Ben's picture

Is it possible that the DACU account is used for some type of impersonation on the machine already as part of a group policy setting or network installation script or something? This seems like this could be the case since upon initial reboot we are capturing his SSO credentials rather than the currently logged on user. So this other user (DACU) has already authenticated prior to jalway authenticating.

If/when you consider your issue resolved, please click Mark As Solution on the most helpful response.

Jeff_LSI's picture

So, it looks like user DACU is used for LDAP credential sync. Thats it. Is there anything that we should check in the LDAP configuration that might cause this? Or is it possible that LDAP wasn't working properly in older versions of PGP desktop?

sven_frank's picture

Ok when someone wants to continue on this Issue let me know:

1. I need the content of c:\windows\temp\pgpssolog.txt

    --When it works and when not

2. in the PGPPrefs.xml search this value:

 

    <key>autoAddWDEUsers</key>

    <true></true>

3. Do you have a pgptrustedcerts.asc or orgkey.asc on this machine ?

The normal debug log is partial helpfull 

I agree with Ben: Impersination can an Issue in that case. 

Is there a prefs file etc for that user on the machien ?

 

 

 

If/when you consider your issue resolved, please click Mark As Solution on the most helpful response.