Cannot disable TripleDES (3DES) in PGP Encryption Server (formerly SEMS)

Products

• Encryption Management Server
• PGP Command Line
• PGP Key Management Server
• PGP Key Mgmt Client Access and CLI API
• PGP SDK
• Desktop Email Encryption
• Drive Encryption
• Endpoint Encryption
• File Share Encryption
• Gateway Email Encryption

Issue/Introduction

The PGP Encryption Server is capable of using various ciphers to encrypt email using PGP/MIME or S/MIME. For key generation 3DES is a cipher that cannot be unchecked. The PGP Encryption Server will then generate all keys with 3DES as the default cipher if the preferred cipher is not available to use.

Resolution

As 3DES is a default fallback cipher.  If you would like to disable 3DES, please reach out to Symantec Encryption Support for further guidance.

Additional Information

EPG-35303/EPG-35296/EPG-35296/EPG-20785