Encryption Desktop version 10.3.2 MP10 or earlier clients cannot communicate with server after upgrading server to 3.4.0

Products

• Encryption Management Server

Issue/Introduction

After you migrate Symantec Encryption Management Server to 3.4.0, the Symantec Encryption Desktop version 10.3.2 MP10 or earlier clients are no longer able to communicate with the server.

Environment:

Symantec Encryption Management Server is migrated to version 3.4.0 from the earlier versions.

 

Cause

Prior to your migrating Symantec Encryption Management Server version 3.4.0, the server and the clients communicate over SSL using the RC4 algorithm as part of the protocol. The MP11 Maintenance Pack and later releases removes RC4 from the Symantec Encryption Management Server SSL protocol in response to CVE-2013-2566, which identified RC4 as a potential vulnerability.

However, existing clients continue to communicate using an SSL protocol that contains RC4. Therefore, after upgrading your server, the clients are no longer able to communicate with the server.

Resolution

Symantec Corporation is committed to product quality and customer satisfaction. This issue is under consideration to be addressed in a future version or Maintenance Pack of the product.
Be sure to refer to this document periodically, as any changes to the status of the issue will be listed here.

 

Workaround:

To resolve this issue, each user on a client system must do one of the following tasks:

• Restart the PGPTray services
• Log off and log back on
• Restart their system

Any one of these actions re-establishes client-server communication and no further action is required.