I use the Directory Synchronization for then enrollment, but I find that some of AD user can not enroll in the PGP server, the PGP universal Satellite's log is below..
16:04:51 Error Cannot connect to SOAP port at icbcpgpprod.icbc.mo: the TLS connection was unexpectedly shutdown (-11250)
16:04:51 Warning Server pgpprod.com not responding; will try again every 180 seconds
16:04:51 Info Uninitialized PGP Universal key parameters; key setup aborted