Domain user password and GKM key passphrase are set separately and are not synchronized. GKM key passphrase should synchronized with domain password when password is reset by a domain user.
Guarded Key Mode (GKM) was designed so the GKM key stored by Symantec Encryption Management Server is encrypted using the user's passphrase.
Symantec Corporation is committed to product quality and satisfied customers. This Feature Request is currently being considered by Symantec Corporation to be addressed in a forthcoming version of the product.