Symantec Encryption Desktop UEFI mode bootguard disk UUID may contain an additional 14 characters

Products

• Drive Encryption

Issue/Introduction

In certain circumstances, Symantec Encryption Desktop UEFI mode bootguard disk UUID may contain an additional 14 characters.
The UUID is displayed when you press F4 at the bootguard login screen.

The additional characters are only displayed at bootguard, they are not displayed when the following command is entered:

"C:\Program Files (x86)\PGP Corporation\PGP Desktop\pgpwde" --list-users |find "Disk UUID"

      Disk UUID: 1949742a-4ae4-4394-8766-cd1a6fe71cc2

So too, the additional characters are not displayed in Symantec Encryption Management Server.

Note that this issue does not affect the validity of the WDRT (Whole Disk Recovery Token).

The additional characters will result in two occurrences of 100000 being inserted into the last 12 characters of the UUID.
Therefore a UUID may change, for example, from this:

1949742a-4ae4-4394-8766-cd1a6fe71cc2

to this:

1949742a-4ae4-4394-8766-cd1a6f1000000e71c1000000c2

Resolution

This issue is fixed in 10.4.0 MP1.

Applies To

Symantec Encryption Desktop 10.3.2 in UEFI mode
Microsoft Surface Pro 3