PGP Encryption Server SNMP service requires the SHA authentication protocol (Symantec Encryption Management Server)

Products

• Encryption Management Server
• Gateway Email Encryption

Issue/Introduction

The SNMP service in PGP Encryption Server (Symantec Encryption Management Server) requires the SHA authentication protocol rather than the MD5 authentication protocol.

Attempting to use the MD5 authentication protocol will result in the following error message:

Authentication failure (incorrect password, community or key)

Environment

PGP Encryption Server 3.3.2 and above.

Cause

The MD5 authentication protocol is not supported by the PGP Encryption Server.

Resolution

The SNMPv3 USM (User-based Security Model) supports the following protocols:

1. Privacy protocol: CBC_DES or CFB_AES_128.
2. Authentication protocol: MD5 or SHA.

The SNMP management host can use either DES or AES as the privacy protocol but must use SHA as the authentication protocol when communicating with PGP Encryption Server.