ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

BUG REPORT: Embed Preset Policy Prevents Encrypting Drives


Article ID: 156704


Updated On:


Symantec Products


PGP Universal Server can build a customized installer package for PGP Desktop that is managed by the PGP Universal Server.  When a client is managed by the PGP Universal Server, Policy updates are centrally managed and can be dynamically updated to the client.  In order for this dynamic functionality to work, a connection from client to server over port 443 is required.

There are conditions where some clients will never communicate with the PGP Universal Server.  In these cases, the Embed Preset Policy option is available. 

Starting with PGP Desktop 10.2.0, if PGP Whole Disk Encryption is needed, there is an issue where the disk will fail to start encryption with an error:

Could not start disk encryption err: -11984


Unable to start encryption: not permitted by your Administrator (-12198)


This problem occurs only with PGP Universal Server 3.2.0 through 3.2.1 MP2 and PGP Whole Disk Encryption 10.2.0 through 10.2.1 MP2.


This issue is fixed in PGP Universal Server 3.2.1 MP5 and PGP Desktop 10.2.1 MP5 Build 5033.