Hello, on PGP 10.3.2, I'm unable to decrypt anything, since Symantec Encryption Desktop seems to be unable to read my private keys
In PGP Folder, My .skr and is sized 0 ko, and my .pkr 2 ko Is it normal ?
So in this keyring I have my public key, but nothing that look like a private key.
Any tip for me ?
Regards,
Romuald.
So I had everything working correctly and wanted to get it working even better.....so I reinstalled with the PGP_INSTALL_DISABLESSOENROLL=0 MSI switch. Now anyone on that machine receives the error "returning fault -11286 (authorization failed for this operation)"
I can duplicate this on a working machine by deleting the %appdata%\Roaming\PGP Corporation folder, but can only resolve the issue by restoring that valid data. Is there anyway to rebuild this data? Why didn't it reset after I installed? Can I resolve this issue without reverting back to my original install that didn't enroll super siliently?
CLIENT-00082: client request <AuthenticateInternalPassphrase> returning fault -11286 (authorization failed for this operation)
Sat Jan 9, 2016 at 11:17:19 AM -05:00
CLIENT-00082: failed authentication for internal Encryption Desktop 10.3.2.15238 user 900026557 from [124.4.164.98]
Sat Jan 9, 2016 at 11:17:19 AM -05:00
Hi,
We have Fileserver with Files and folders which need to be encrypted and the same files/folders need to be shared with authorized users only. so, is it possible with File Share encryption to share those folders to users without having installed Symantec Encryption Desktop in users workstations?
Thanks,
anylmjn
Everything was working correctly, but when I install a trusted certificate on the Encryption server all my keys become invalid. If I switch back to the non-trusted key it works fine. Anyway to get this working without adding the non-trusted key to my root certificate authority?
Good morning.
when I try to access a file share of PGP encryption I see the folder u:\
but I do not see my key users and is not available add user (disabled).
This is unknown key in key users
UNKNOWN KEY , KEY ID IS 0XC95253CB
How do I view my key ?
Thank you
We are trying to use the File Share Encryption and because of the way we run a particular product, it is giving us fits. The product is Angoss Knowledge Studio. Due to licensing constrains, the appliaction is started with the runas.exe command and all instances are run as a service user account, but the user is logged in as themselves(for compliance reasons). What happens, is the application runs, but the PGPtray and its dependent services, dont realize when it trys to access an encrypted share, so they get access denied. We were able to figure out that if you stop the tray service and the other services and start them in the same script as the angoss program, it is able to access the share from the program. But, the user then loses the ability to access the share from any other applications like windows explorer. It seems it will only run one instance of the application. The format of the scripts is below. Any input or ideas are appreciated.
set WshShell = WScript.CreateObject("WScript.Shell")
strCmd="C:\Program Files\Angoss\runangoss.cmd"
strUser="claire@xxxxxxx.net"
strPass="xxxxxxxx"
WshShell.Run "c:\windows\system32\runas.exe "& " /user:"& strUser & ""& chr(34) & strCmd & chr(34)
WScript.Sleep 1000
WshShell.Sendkeys strPass & "~"
(the cmd it calls)
start """C:\Program Files (x86)\PGP Corporation\PGP Desktop\PGPtray.exe"
"C:\Program Files\Angoss\Workstation 9.4\bin\Angoss.KSMain.exe"
I currently use PGP file encryption to encrypt files coming in/out of my company. We just got a request that for a certain client, we need to be able to support FIPS 140-2. My question is I see that I can enable FIPS by going into the advanced options and enabling it. Then rebooting the server. My question is would I then need to generate a new Public/Private key set to reflect this change? I would assume the current keys I've been using would not work. Is this correct? Am I missing a step somewhere? Thanks in advance.
Using a temporary trial of pgp encryption some time ago in Windows 7 64bit I created an exe file of 8.82gb containing several mp4 files. During encryption the menu warned that the file was too large but that a "small helper file" would be created to enable decryption even though the final file would be larger than the normal limit. No small file was created and the .exe encrypted file cannot be decrypted. Is there any software that will resolve this problem? Is there any procedure to enable decryption?
I have an end user who is able to open received PGP encrypted files, but when creating files, a 'the file was corrupted' message populates no matter where the file is opened.
The user is able to receive messages from other users and decrypt them successfully, but can't open files they encrypt on their own machine even when trying to open locally.
Multiple clean installs of the PGP software have not resolved the issue, nor have the functions available under the 'tools' tab.
Please advise if you've run into something similar and how you resolved it.
Thank you!
Hi,
We are planning to use Symantec File Share and Drive Encryption in our environment. I wanted to inquire if there is Master key available to decrypt any File Share or Drive which was encrypted by an employee and now he is refusing to decrypt it because he has left the company or is disgruntled?
Hi,
We are planng to use Symantec File Share Encryption in our Environment. I wanted to inqurie if an encrypted file/share is on a server and multiple users access the file, what resources are taxed? Server? PC? Both?
Hi,
We are planning to use Symantec Encryption Management Server (EMS) for managing File Share and Drive Encryption in our environment. Some of our FIle Servers use Microsoft DFS-R & VSS. I want to know if there are any potential issues or compatiability issues that can arise when used with Symantec File Share Encryption? Any help in this regard will be much appreciated. Thanks.
I'm using the flex response from DLP to encrypt files from the DLP console. The configuration I have setup encrypts the file to this ACL:
DLP (group key) "Admin"
DLP service account "User"
Everyone (group key) "User"
The DLP group key has an LDAP matched users list that I am included in, and the "Everyone" DLP group key includes all users. My understanding is that anyone in the "admin" level group key can unlock and decrypt a file, and that anyone in the "user" level can unlock the file.
In practice, I can only unlock or decrypt with a private key that I have on my local keyring, in this case the service account or the ADK. My own private key which is on my keyring and is assigned to my matched consumer record in the PGP group will not unlock the file. So clearly the relationship so far is 1:1. If I have a private key on my keyring that is part of the direct ACL, I can unlock the file. Otherwise I cannot.
What am I missing here?
At the company where i work, PGP 10.2/10.3 is the official file encryption program all users have access to. But now that it is no longer available to buy, the question has been raised about the compatibility between pgp and endpoint encryption.
If an emplyee encrypt a file in PGP and sends it to a partner that has endpoint encryption. Will it work, can the person at the partner company open the file, using keys, just like in PGP to PGP transfers?
I have a fairly fast system: Windows 7 [64] with an Intel 7 processor running at 4.0 Ghz) so computer startup normally takes only 10 or 11 secs. After loading the Semantec Encryption Desktop, the time for startup is taking 8.5 minutes. I realize that the product will consume additional time to accomplish its tasks, but this is totally unacceptable. The software is version 10.3.2 MP11 [Build21274] [PGP SDK 4.2.1.] What is the problem? What can I do to fix it? Thank you. Robobob
Hello Everybody :)
Currently we have a company that sends us a pgp encrypted file using my public key against my email address, We will be in be very near future recieving other pgp encrypted files. Should I send the same key to the other companies or should I generate a new key for each company? If I generate key for each company what email address should I use?
I probably answered my own question but I wanted know what others think.
Thanks in adavance
Darren
Hi,
I jsut wanted to know the system requirement for file share encryption. we need to have vmware vsphere server to install SEMS or we can setup on vmware workstation.
I appreciate any help
We currently have the Symantec Encryption Desktop with PGP Zip. We have a requirement to automate the encryption process using this application. Is this possible? If yes, how can we do it?
Thanks
Hi,
I am using Encyryption Desktop and don't quite understand the difference between File Share Encryption and a Virtual Disk.
I understand that File Share Encryption is used to encrypt data document on file servers and that the content remains encrypted if copied to another drive or archived to backup media. And I know that a Virtual Disk is essentially an encrypted file which can be mounted and used as if it were a drive, but what I dont understand is why there are two things which are essentially doing the same thing.
Looking at it simplistically, the encrypted files in a File Share Encryption folder are just encrypted files but then so is a Virtual Disk. With File Share Encryption, the encryption goes with the files and it also does using a Virtual Disk so I'm strugglung to see the advantage of one over the other.
Also, I notice that I am unable to add and Security Questions to my Virtual Disk. It is unmounted but the button is greyed out.
If someone could assist with these questions, I would greatly appreciate it.
Thanks
Hello,
I'm having problem in configuration pgpnetshare command line. Namely, i would like to protect ( encrypt ) destination problem with group key. Since i am using 10.3.2 version it is supported.
But main problem is beacuse i am getting " Error: A file or folder could not be found [-11997]."
Command is correct and destination folder exist..
Example command. ( this time with -r parameters not with group key) anyway i get same error
pgpnetshare --encrypt c:\temp1 -r 57C4BC0A --signer 57CCBB0A --passphrase 'XXXXXX' --remote server1 --verbose
and got:
Error: A file or folder could not be found [-11997].
Since i have check all related parametars but no luck, i am asking communitity for help.
BR,
Gohu