Endpoint Encryption

 View Only
  • 1.  Key's "TRUST"...None or Implicit??

    Posted May 04, 2015 07:22 PM

    I use Windows 7.x and Windows 8.1.x.

    I installed Symantec's Encryption Desktop 10.3.2 MP8 on all systems.

    I created a new keyring on system 1.

    I downloaded the Symantec PGP Global Directory Verification Key.

    I created a new key for system 1.

    The new key TRUST options are "NONE" or "Implicit". NONE results in no verification (unusable), IMPLICIT results in good verification (usable).

    Why can I not select "Marginal" or "Trusted"?

    Either way, I left it on IMPLICIT. I Signed the Symantec PGP Global Directory Verification Key. The SPGDVK :) allows trust to be: NONE, MARGINAL, TRUSTED, and IMPLICIT. I selected TRUSTED.

    I then imported public and private keys from my former keyring.

    And, now I'm confused.

    Regardless of which key I select from former keys, or the new key generated at the beginning, the trust levels are only NONE or IMPLICIT.

    Is that because I imported a keyring, rather than an individual key?

    Is it because I exported the keyring incorrectly?

    The only "signing" key available to me was the new key that I created at the beginning, which as I said allowed only NONE or IMPLICIT.

    I used to know the answer for this. But it's been a long time since I updated a keyring, or created a new keyring.

    My understanding is that IMPLICIT is less secure than MARGIINAL or TRUSTED.

    If some nice person would help me understand this process (again), I would greatly appreciate it and the person would "win a cookie!" :)

    Thank you!

     



  • 2.  RE: Key's "TRUST"...None or Implicit??

    Posted May 05, 2015 08:58 AM

    Hello Srosxi,

    Besides certifying that a key belongs to someone, you can assign a level of trust to the owner of the keys indicating how well you trust them to act as an introducer for others, whose keys you may get in the future.

    This means that if you ever get a key from someone that has been signed by an individual whom you have designated as trustworthy, the key is considered valid even though you have not done the check yourself.

    You must sign a key before you can set a trust level for it.
    Public keys can be None, Marginal, or Trusted.

    Your keypairs can be None or Implicit (meaning it is your own key and thus you trust it completely). You shouldn’t have anyone else’s keypairs.

    Also

    1. None means you don’t trust the owner to act as an introducer.

    2. Marginal means you partially trust them.

    3.Trusted means you fully trust them.
    ƒ

    If you are granting trust for a keypair, you can select None or Implicit. Only keypairs that you are importing from backup or from another computer of
    yours need to have their trust set to Implicit; when you create a keypair, its
    trust is automatically set to Implicit.

    For more information please follow the guide , pages 55 to 59.

    https://symwisedownload.symantec.com/resources/sites/SYMWISE/content/live/DOCUMENTATION/7000/DOC7060/en_US/symcEncrDesktop_1032_win_usersguide_en.pdf?__gda__=1430974123_586b262177976080feb6a89a782e6c5e .

    Please let me know if you have any further questions.