File Share Encryption

We're trying to group  200 clients in to 4 so we can do client upgrade by batch. Upon checking it only alows me to move users by name, which means I need to type them one by one, is there any other way that we can do this multiple?

Thanks,

You can do consumer matching by Security Group in Active Directory.  You should be able to create 4 groups in AD, and assign them to the different users, or you can use existing groups if available.

If you are not using consumer matching for AD groups, you will have to manually move the users.

If you are creating 4 new groups, I would suggest going to Keys>Managed Keys, and selecting the "Generate AD Group Keys" option.  This will browse AD with LDAP, and allow you to automatically create a group that will match consumers in that group.  It also generates a group key for the group as well.

We can't touch the groupings on our AD, how about a way to install the client silently? is this possible?

Hi d3ry1,

As suggested by Mike, the 2 ways for adding users to groups is either matching the consumers from the AD group, or adding them manually.

Below is the article for Setting Group Membership in PGP Universal Server 3.0

www.symantec.com/docs/TECH149798.

About installing the client silently, if this is regarding the SED (PGP) desktop installation, then we have the below article that talks about the same.

HOW TO: Enable Silent Enrollment for Symantec Encryption Desktop

www.symantec.com/docs/TECH149857

HOWTO: Configure Invisible Silent Enrollment for Symantec Encryption Desktop Clients

www.symantec.com/docs/HOWTO77014

Hi Shahidhussain,

about this:

HOW TO: Enable Silent Enrollment for Symantec Encryption Desktop

www.symantec.com/docs/TECH149857

The users are already enrolled, I'm looking for a way to update the pgp desktop silently, because we already udated the server to the latest.

Thank you,

Hi D4ry1,

There is a way to upgrade the PGP desktop from the server; please check the article below.

Does PGP Universal Server have the ability to push PGP Desktop client upgrades?

www.symantec.com/docs/TECH177025.

You should also be able to push out a client upgrade with whatever third-party push software you are using.  Since an upgrade simply installs over the top of the existing version, it should work fine.

So does this mean that there's no silent upgrade for the clients?

Hi,

I also looked into this kb before, although this is possible and working, we need to do it in a silent way, upon testing this we were prompted to click update box and another prompt for the restart prompt box. We need a way where  the user should never see the upgrade.

Thank you,

The thing of it is this, the SEMS/PGPUN has no function to push out client updates whatsoever.  It cannot remotely upgrade your clients for you.  All it can do, is let the users know a newer version is available.  After which it is up to the users to download and upgrade the client themselves (which users usually can't do as they are not local admins).

This means (as Mike Ankeny says, Thumbs Up!) you'll need to look into pushing the upgrade via some software management tool (Altiris/SCCM/LanDesk/whatever) instead.  Going via another tool also means there's no point in messing with the groups in the SEMS, so you can save a bit of time here at least!

As far as pushing upgrades via the SEMS in the future, I'd suggest subscribing to the below article:

http://www.symantec.com/docs/TECH204448

Hi, upon checking with support, it seems like the best way is to use third party deployment tool BUT, modify the packege so the SSO Enrollment property is disabled. Meaning only the upgrade of the agent is going to happen on the installation process, since the users are already enrolled and encrypted.

Thanks,