Endpoint Encryption

 View Only
  • 1.  cooperating with corp using ADK

    Posted Apr 10, 2013 06:41 AM

    Hi

     

    I'm going to use PGP Desktop Email and my trading partner uses ADK on his side an forces me to encrypt all emails to it as well as to recipient key.

    Am I able to achieve that using only standalone PGP (no server on my side, I'm going to buy only Symantec Email Encryption 10.3 license)?

     

    thanks

    Marek



  • 2.  RE: cooperating with corp using ADK
    Best Answer

    Posted Apr 10, 2013 07:52 AM

    The Corp using an ADK is no problem for a stand alone user.  All you need do in addition to having his public key on your keyring, is to also have the ADK on your keyring, and also sign it so that it will be verified.



  • 3.  RE: cooperating with corp using ADK

    Posted Apr 12, 2013 08:29 AM

    Has this resolved your concern?



  • 4.  RE: cooperating with corp using ADK

    Posted Apr 12, 2013 08:43 AM

    I'm waiting for full license (I don't want to test on trialware) and now only preparing to make it happen. I'll let you now when I'll manage to do that.



  • 5.  RE: cooperating with corp using ADK

    Posted Apr 12, 2013 08:55 AM

    Thanks for the response.  Just thinking you may not know that the Trialware is the same software as the full license.  The only difference is that the trial license is the short time limitation, and it may not be the latest build.  You can even just enter your purchased license in the Trialware install, instead of doing a new install.  If you do the new install, it may be a newer build (making it a generally good idea), but the Trialware keyrings, preference settings, and messaging policies will all be retained and used. 



  • 6.  RE: cooperating with corp using ADK

    Posted Apr 16, 2013 12:34 AM

    if Tom's response answered your question. Please click the link which says "mark as solution" at the bottom of his comment so that this forum post shows as answered.



  • 7.  RE: cooperating with corp using ADK

    Posted Apr 16, 2013 03:45 PM

    Thank you.

     

    To be clear: to encrypt to ADK beside recipient one have to

    1. import public key (ADK) to keyring.

    2. sign it to have it as "verified"

    3. add to Master Keys in Options (in my case I'm obliged to encrypt every email to both ADK and recipient key)



  • 8.  RE: cooperating with corp using ADK

    Posted Apr 16, 2013 05:00 PM

    To encrypt to someone else's key that has an ADK, just import both the other person's key, and their ADK, sign both to have both marked as Verified.

    If you have a local ADK that has to always be encrypted to, this will be done by your organization if you are in a settings managed by a PGP Universal Server.  If not in such setting and there is some other key your organization mandates that all encryption also be encrypted to, add that key to your Master Keys in Options.  However, realize that any key in the Master Key list, is a key that all email encryption, all file encryption, all virtual disks, etc. will also be encrypted to.  So the owner of this key can decrypt any and all encryption you ever do.  Typically, the only key someone adds to the Master Key list, is their own key, ensuring that he/she can always decrypt any encryption he/she does.