Changing the IP address of the Symantec Encryption Management Server (PGP Server)
search cancel

Changing the IP address of the Symantec Encryption Management Server (PGP Server)


Article ID: 153407


Updated On:


Encryption Management Server Gateway Email Encryption Endpoint Encryption Desktop Email Encryption Drive Encryption File Share Encryption Information Centric Encryption PGP Command Line PGP Key Management Server PGP Key Mgmt Client Access and CLI API PGP SDK


Symantec Encryption management Server (PGP Server) uses a statically assigned IP address on the network interfaces. 

If you need to change the IP addresses, do so with care as doing so incorrectly could cause an outage to the production environment.


Important Note: There is risk involved in changing the IP address of the PGP Server and should be done only during off hours to minimize the impact.  
In order to change the IP address of the server, first take a backup of the server and backup the Org Keypair as well.  For more information on backing up the PGP Server, see the following articles:

180196 - HOW TO: Backup the Organization Key on Symantec Encryption Management Server

180249 - HOW TO: Configure the Backup Location and schedule for Encryption Management Server

153588 - Restore Backup files to Symantec Encryption Management Server (PGP Server)

153318 - Restoring Encryption Management Server Backups larger than 2GB (Or using PGP Server Backup files via CLI)

To take a backup from your server, login to the SEMS, and click on System, Backups, and make note of the remote location where the backup is stored.

It is also recommended to take a snapshot of the Virtual Machine in case something goes wrong, it's easy to revert (Backups take time and effort to restore, but are generally easy to do, but snapshots are easier to use).

It may be necessary to obtain console access to the server, so the best option if you need to change the IP address, it is to contact Symantec Encryption Support for further guidance. 

There are 2 options to change the IP address of the Symantec Encryption Management Server:

Option 1. Through the PGP Web Interface

Step 1: Login to the PGP Server and navigate to System, Network.
Step 2: For each network interface change the IP address, subnet mask and default gateway. Ensure these are correct before clicking Save.
Step 3: Update your DNS records to map your FQDN to this new IP address.
Step 4: Restart all services.  To do this, go to System, General Settings:

Option 2. By modifying the configuration file

This is the preferred method, but to change this file,  please contact Symantec Encryption Support for further assistance. 


If the FQDN for the PGP Server has not changed, then there are no changes needed for the PGP Desktop client. 

If you are unsure what the hostname is, check the registry for the PGPSTAMP, which should show you which FQDN was used for client-server communications.  If the FQDN is different, reenrollment may be needed.  If you are unsure, please reach out to Symantec Support for further assistance.

PGPSTAMP Location:
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\PGP Corporation\PGP\PGP Stamp, this will have the entry with either IP address or hostname.

If you need any assistance above and beyond these steps, log a new support case with Symantec Encryption Support who can assist with this.

WARNING: Changing the hostname on the PGP Server is a significant change and should be done only after following the steps above and understanding the risks.