Add a Passphrase User to a PGP Whole Disk Encrypted Disk

Products

• Symantec Products

Issue/Introduction

This article details how to add users to the User Access list for PGP Whole Disk Encryption.

 

Resolution

Users who create an encrypted disk or partition can make it available to others. These additional users can access the encrypted disk or partition using their own unique passphrase, private key, or token. Having multiple users who can access a disk or partition protected by PGP Whole Disk Encryption serves as a backup in case one person forgets their passphrase or loses their authentication token.

To add a Passphrase User:

Windows - Single Sign-On

 

1. Select the disk or partition you want to encrypt.
2. Select New Passphrase User. The PGP Disk Assistant: Whole Disk Encryption - New User dialog box is displayed.
3. Select Use Windows Password.
4. In the Two Factor Authentication dialog box, select Proceed with Passphrase Authentication only and click Next.
5. In the PGP Disk Assistant: Windows Account Logon dialog box, type your Windows user name, domain, and password, and click Next.
6. Click Finish.

If you choose the Use Windows Password option, after initial encryption, use your Windows password when the PGP BootGuard screen is displayed at the start of booting. The PGP Single Sign-On (SSO) feature logs into Windows for youyou only need to type your passphrase once. (This is the Single Sign-On feature. For more information, see Using PGP WDE Single Sign-On section of the PGP Desktop User Guide.)

Create New Passphrase

 

1. Select the disk or partition you want to encrypt.
2. Select New Passphrase User. The PGP Disk Assistant: Whole Disk Encryption - New User dialog box is displayed.
3. Select Create New Passphrase, then click Next.
4. In the Two Factor Authentication dialog box, select Proceed with Passphrase Authentication only and click Next.
5. In the Create Username and Passphrase dialog box, type a name for the Username.
6. Type a passphrase for your user account.
7. Type the passphrase again in the Confirm field and click Next.
8. Click Finish.