Creating PGP Desktop Client Policies on the PGP Encryption Server Consumer Policies (Symantec Encryption Management Server)
search cancel

Creating PGP Desktop Client Policies on the PGP Encryption Server Consumer Policies (Symantec Encryption Management Server)

book

Article ID: 153564

calendar_today

Updated On:

Products

Desktop Email Encryption Drive Encryption Encryption Management Server Endpoint Encryption File Share Encryption Gateway Email Encryption PGP Command Line PGP Key Management Server PGP Key Mgmt Client Access and CLI API PGP SDK

Issue/Introduction

PGP Encryption Desktop settings can be established for the default internal user policy as well as any custom internal user policy you create.

Each of these can have different sets of PGP Desktop settings and can be controlled via the PGP Encryption Server.  

This article will show you how to modify the policies and where they are located. 

For information on how to create a client from the PGP Encryption Server, see the following article:

180244 - Downloading the PGP Encryption Desktop (Symantec Encryption Desktop) Client Installers from the PGP Encryption Server(Symantec Encryption Management Server) 

 

Resolution

PGP Server Administrators can control PGP Encryption Desktop policy settings to include the following:
 

  • Client licensing 
  • Feature settings
  • Feature control
  • Component control
  • PGP Key Management



To configure PGP Encryption Desktop client settings
 

  1. Login to the PGP Server administrative interface on port 9000.
  2. Click on Consumers > Consumer Policy.
  3. Select the desired policy. The Consumer Policy Options are displayed for the policy.
  4. Click the Keys button to configure key generation settings for PGP Desktop clients. You can set key type, key size, preferred cipher, key mode, and certificates for client keys.
    TIP: For Keymodes, we recommend SKM generally.  For information on Keymodes, see the following article:

    153249 - Symantec Encryption Management Server Key Modes

    Selecting the most appropriate Keymode for your environment is critical; We recommend reviewing the linked documentation to endure your selection aligns with your security requirements. 
  5. Click Desktop next to PGP Desktop. This allows you to configure client settings in the following areas:
  1. After configuring the policy, click Save.

 

Note: It is possible to "Clone" policies so that once you have a base policy created, you can then clone and build upon.  It is not possible to "export" policies and import to other PGP servers.

If you would like the ability to export policies, please reach out to Broadcom Encryption Support and mention this article.

Additional Information

Powered by Wolken Software