PGP: Message is blocked by policy - recipient key not found (PGP Encryption Desktop)

Products

• PGP Command Line
• PGP Encryption Suite
• PGP Key Management Server
• PGP Key Mgmt Client Access and CLI API
• PGP SDK
• Desktop Email Encryption
• Drive Encryption
• Encryption Management Server
• Endpoint Encryption
• File Share Encryption
• Gateway Email Encryption
• Mobile Encryption for iOS

Issue/Introduction

When sending an email to a group of recipients, mail delivery fails and you receive a message similar to the following:

PGP: Message is blocked by policy - recipient key not found. Error code: [0xa101000c].

Resolution

This message is received when PGP Encryption Desktop is unable to find a key for one or multiple recipients in group list and then blocks the message from being sent. An advanced preference can be added to display the email addresses for recipients whose keys were not found. The email addresses are displayed in the Error Details of the Non-Delivery Receipt as shown below:

PGP: Message is blocked by policy - recipient key not found. Error code: [0xa101000c].

The original message is embedded in this non-delivery report. Click Send Again to see the original text and have the opportunity to resend the message. If the problem persists and you still receive another non-delivery report, please contact your administrator for details.

Error Details:
Your message cannot be delivered to the following recipient(s) because Symantec Encryption Desktop was unable to locate the necessary encryption key(s):

[e-mail]
[e-mail]
[e-mail]

This advanced preference is available for both stand-alone and managed Symantec Encryption Desktop clients.

To enable the preference on a PGP Encryption Desktop stand-alone client

1. Stop the PGP services by clicking the PGP Tray icon and selecting Exit PGP Services. Then click Yes.
2. Browse to the PGP Corporation > PGP folder in the user's profile.
   
   Windows: Click Start and type %appdata% and press Enter. Then click the PGP Corporation > PGP folder.
   
   
3. Right-click the PGPprefs.xml file and select Open With > WordPad. The PGP preferences are displayed.
4. Add the following entry to the PGPprefs.xml file:
   
   <key>mailShowKNFRecipientsInNDR</key>
   <true></true>
5. Click File > Save.
6. Close Wordpad.
7. Restart PGP Services by clicking Start > All Programs > Startup PGPtray.exe.

To enable the preference for Symantec Encryption Management Server 10.x managed clients

1. Login to the Symantec Encryption Management Server admin interface.
2. Click Consumers > Consumer Policy.
3. Click the desired policy to edit.
4. On the Consumer Policy Options screen select Edit next to General.
5. Scroll down and click Edit Preferences.
6. In the Pref Name: field type mailShowKNFRecipientsInNDR
7. Leave the Type as Boolean .
8. In the Value field, type true.
9. Click Save.

 

 

Additional Information

446516 - Attempting to send an encrypted email with PGP Encryption Desktop results in blocked message and error: "Keys not found (key is not end-to-end)"

225360 - PGP Message Blocked when sending email in Outlook (PGP Desktop)

153426 - Troubleshooting: Mailflow with Symantec Encryption Management Server (PGP Server)

153690 - PGP: Message is blocked by policy - recipient key not found (PGP Encryption Desktop)

150133 - Header and body flags that indicate PGP encrypted email for SPAM filter and mail server configuration

180151 - Creating Policy Chains to Set Mail Policy in PGP Server (Symantec Encryption Management Server)

181072 - Configuring Mail Proxies with the PGP Server (Symantec Encryption Management Server)

156100 - Emails going to exception chain on the PGP Server (Symantec Encryption Management Server)

231021 - PGP Encryption Server Mail processing rules do not work as expected (Symantec Encryption Management Server)

157981 - Encrypting to Distribution Lists with Symantec Encryption Desktop (PGP Desktop)

156303 - Symantec Encryption Products Current Version Available