BUG REPORT: Embed Preset Policy Prevents Encrypting Drives

Products

• Symantec Products

Issue/Introduction

PGP Universal Server can build a customized installer package for PGP Desktop that is managed by the PGP Universal Server.  When a client is managed by the PGP Universal Server, Policy updates are centrally managed and can be dynamically updated to the client.  In order for this dynamic functionality to work, a connection from client to server over port 443 is required.

There are conditions where some clients will never communicate with the PGP Universal Server.  In these cases, the Embed Preset Policy option is available. 

Starting with PGP Desktop 10.2.0, if PGP Whole Disk Encryption is needed, there is an issue where the disk will fail to start encryption with an error:

Could not start disk encryption err: -11984

or

Unable to start encryption: not permitted by your Administrator (-12198)

Cause

This problem occurs only with PGP Universal Server 3.2.0 through 3.2.1 MP2 and PGP Whole Disk Encryption 10.2.0 through 10.2.1 MP2.

Resolution

This issue is fixed in PGP Universal Server 3.2.1 MP5 and PGP Desktop 10.2.1 MP5 Build 5033.