Endpoint Encryption

Hi Everyone,

It has been an ongoing issue where some employees come in and are not allowed access to folders which they have access to. When ever I check the Symantec Desktop Encryption client and try to download the policy I would get the message, "Unable to download policy at this time". When I look at their share folders all the keys show up as unkown. Usually a restart of the system brings them back up, but sometimes I have to go as far as deleting the PGPpolicy and PGPprefs for a complete re-enrollment.

Our Symantec Encryption Server is version  3.4.0 (Build 1100),and I recently did the hot fix update. All the clients are running Desktop Encrpytion 10.4.0.1100. Our Keyserver settings under Keys>Keyseyserver has two keyservers, (1) Our local machine on Port 80 Type USP, and (2) PGP Global Directory on Port Type 389 PGP. I'm wondering if this part is configured correctly, and if both servers are necessary. Also, we have and admin group and employee group consumer policy. Those who are consistantly locked out are in the employee consumer. 

I would really appreciate any help, looking forward to hearing from someone soon.

Ira

It actually sounds as if you're encountering a histroical issue that *should* already be reolved, as below:

http://www.symantec.com/docs/TECH222962

If this does accurately describe your issue, then I'd highly recommend you contact Symantec support directly to investigate, as this is something that would need to be escalated to engineering if it's the same problem coming back.

On a related note, is there any reason why you're not using Group Keys (http://www.symantec.com/docs/HOWTO61299)?