Windows Password does not synchronize when using the Single Sign-On feature

Products

• Symantec Products

Issue/Introduction

This article details an issue with a third-party software network driver and the Single Sign-on feature of PGP Whole Disk Encryption. This article applies to versions PGP Desktop 9.6.x and above. 

 On a PGP Whole Disk Encrypted system using the Single Sign-On feature, after changing your Windows password, the new password is not synchronized to the PGP BootGuard environment. The old passphrase is still required at the PGP BootGuard screen and will not login to Windows until you enter you new Windows Password.

This issue pertains to PGP Whole Disk Encrypted systems using the Single Sign-On feature only. This issue can be caused by an incompatibility between PGP Desktop and an Intel Wireless driver package installed on the system.

This occurs when the Intel Wireless driver connection is placed before PGP Desktop in the Network Provider Order. The incompatibility causes the PGP BootGuard passphrase to not be synchronized properly with Windows password updates.

The Provider Order in the Advanced Settings of Network Connections determines how the system accesses information on the network.
 

 

Resolution

 

The Single Sign-On feature can also be affected by the Provider Order of other third-party software network drivers. The following steps can also be used to troubleshoot connectivity issues.

 

This issue is resolved by changing the order of the connection for PGP Desktop in the Network Providers list. This can be accomplished by editing the PGP Desktop msi installer or changing the order in the Windows Network Connections properties.

To set the order during installation using the .msi switch:

Use the PGP_SET_HWORDER=1 command to place PGPpwflt in the first of the list. For example, run the .msi installation file using the following command:

msiexec /i pgpdesktop.msi PGP_SET_HWORDER=1

To set the order in the Windows Network Connections properties:

Use the steps below to place the connection for PGP Desktop above the Intel Wireless connection in the Network Providers list.

Windows XP

 

1. Right-click My Network Places and select Properties. or click Start>Control Panel and then double-click Network Connections.
2. Click the Advanced menu and then select Advanced Settings.
3. Click the Provider Order tab.
4. Under Network Providers, select the PGPpwflt entry, and click the Up arrow to move the PGP connection above the Intel or other third-party connections in the list.
5. Click OK to apply the changes.

 

Windows Vista & Windows 7

 

1. Click Start>Network.
2. Select Network and Sharing Center.
3. From the Tasks panel, click Manage network connections.
4. Highlight your Local Area Connection.
5. Click Advanced>Advanced Settings.
   
   NOTE:If the Advanced menu is not displayed, press ALT and the Advanced menu bar appears. Windows Vista may prompt your for your permission to continue.
   
    
6. Select the Provider Order tab.
7. Click the entry PGPpwflt.
8. Click the up arrow to move PGP above other third-party connections.
9. Click OK to apply the settings.

 

Alternate method for Windows 7 if the above does not work.

1. Go to Start.
2. Type "view network connections" in the search box and then click on that selection.
3. Press the "ALT" button and click on Advanced > Advanced Settings (or Advance Connections).
4. Click on the "Provider Order" tab.
5. Click on the PGPpwflt.
6. Click the up arrow to move the PGPpwflt above other third-party connections.
7. Click "OK" to apply the settings.