PGP Encryption Server Administrator Roles (Symantec Encryption Management Server)

Products

• Encryption Management Server
• Gateway Email Encryption
• Encryption Desktop Corporate Powered by PGP Technology
• Gateway Email Encryption Powered by PGP Technology
• PGP Command Line
• PGP Encryption Suite
• PGP Key Management Server
• PGP Key Mgmt Client Access and CLI API
• PGP SDK
• Desktop Email Encryption
• Drive Encryption
• Endpoint Encryption
• File Share Encryption

Issue/Introduction

This article details the different server rights and privileges for PGP Encryption Server Administrator roles (Symantec Encryption Management Server).

Resolution

PGP Encryption Server is pre-configured with the following roles for administrators:

Read-Only Administrator

• View settings and logs.

 

WDRT-only Administrator

• View settings and logs
• Access and read Whole Disk Recovery Tokens.

 

Service Control Only

• View settings and logs.
• Start and stop services but not configure them.
• Shutdown or restart the server.

 

Basic Administrator

• View settings and logs.
• Start, stop services and configure services.
• Shutdown or restart the server.
• Access and read Whole Disk Recovery Tokens
• Configure system settings, install updates and restore backups.
• Manage messaging policies, manage users and their public keys.
• Vet users.

 

Full Administrator

• View settings and logs.
• Start, stop services and configure services.
• Shutdown or restart the server.
• Access and read Whole Disk Recovery Tokens
• Configure system settings, install updates and restore backups.
• Manage messaging policies, manage users and their public keys
• Vet users.
• Configure clustering.
• Export user private keys and manage organization, trusted, ignition, and Additional Decryption Keys (ADKs).

 

SuperUser

• View settings and logs.
• Start, stop services and configure services.
• Shutdown or restart the server.
• Access and read Whole Disk Recovery Tokens
• Configure system settings, install updates and restore backups.
• Manage messaging policies, manage users and their public keys
• Vet users.
• Configure clustering.
• Export user private keys and manage organization, trusted, ignition, and Additional Decryption Keys (ADKs).
• Access the server using SSH with key based authentication.
• Create and manage other administrators.

Additional Information

171746 - PGP Administrator Password Complexity Enforcement via AD Admins (Directory Authentication) for PGP Encryption Server

153670 - PGP Encryption Server Administrator Roles (Symantec Encryption Management Server)

180239 - HOW TO: Enable Directory Synchronization on the PGP Encryption Server (Symantec Encryption Management Server)

180156 - Obtain the Base DN or Bind DN Attributes for LDAP Directory Synchronization for PGP Encryption Server

153668 - Enroll PGP Encryption Desktop clients using Directory Authentication with PGP Encryption Server (Symantec Encryption Management Server)

153425 - Troubleshooting: PGP Encryption Desktop Client Enrollment (Symantec Encryption Desktop)

171744 - PGP Administrator Password Complexity Enforcement via Passphrase Authentication (Manual Password Assignment)

216163 - Reset Password for Administrators on Symantec Encryption Management Server (PGP Server)

 

197991 - PGP Encryption Server Directory Synchronization cannot use IP address for LDAPS (Symantec Encryption Management Server)

 

EPG-23736
EPG-23711
EPG-23710
ISFR-1795/EPG-23755
ISFR-2458/EPG-29427