Encrypting to Distribution Lists with Symantec Encryption Desktop (PGP Desktop)
Article ID: 157981
Updated On:
Products
Issue/Introduction
Symantec Encryption Desktop can encrypt to individual users who have PGP Keys. When there are over 30 users or more, typically these DLs can be skipped, but PGP can expand the list and re-process so that each user can receive an encrypted message.
When user sends an email to several recipients using distribution list and one of the recipients has no email address, Symantec Encryption Desktop (formerly PGP Desktop) blocks outgoing email to all recipients.
This feature request would help to improve user experience delivering secure email to all distribution list users except those who have no proper email address.
Resolution
As long as a PGP Key is available for each recipient, PGP can encrypt to those recipients. The messages will not be sent to the additional users who do not have PGP Keys and in these situations, the emails will take the "Key Not Found" action.
Troubleshooting Blocked Messages
If trying to send encrypted email using these DLs and emails are blocked, further review should be done.
Error:
Your message did not reach some or all of the intended recipients.
Subject: <subject>
Sent: <date> <time>
PGP: Message is blocked - recipient email address could not be resolved. Error code: [0xa1010013].
The original message is embedded in this non-delivery report. Click Send Again to see the original text and have the opportunity to re-send the message. If the problem persists and you still receive another non-delivery report, please contact your administrator for details.
Error Details:
Your message cannot be delivered because SMTP address(es) of some recipient(s) present in a distribution list could not be resolved.
Potential Cause 1: If you have a recipient on the DL who does not have an email address configured, the message could be blocked.
Solution: Ensure that every user in the DL has an email address configured.
Potential Cause 2: If you have a DL and the DL itself is missing an email address, fill this in:
This will ensure proper processing of the DL and as long as the other users have an email address, the messages should be sent encrypted.
It is useful to enable Debug mode on the PGP server and PGP Desktop client to pinpoint these scenarios and what is happening behind the scenes.
Additional Information
Feedback
