Encryption Management Server and Encryption Desktop cannot search key servers using HKP or WKD

Products

• Desktop Email Encryption
• Encryption Management Server
• Gateway Email Encryption

Issue/Introduction

Encryption Management Server and Encryption Desktop can search key servers using LDAP, LDAPS or USP (PGP Universal Services Protocol). Key servers are configured on the Keys / Keyservers page of the Encryption Management Server administration console.

Encryption Desktop managed by Encryption Management Server will use Encryption Management Server as a proxy to search for keys on its behalf. Key servers can also be added directly to Encryption Desktop.

Encryption Management Server and Encryption Desktop cannot search key servers using OpenPGP HTTP Keyserver Protocol (HKP) or OpenPGP Web Key Directory (WKD).

Environment

• Symantec Encryption Management Server 3.3.2 MP13 and above.
• Symantec Encryption Desktop 10.3.2 MP13 and above.

Resolution

Encryption Management Server provides several options for accessing the public keys of external users:

1. Web Email Protection allows external users to upload their PGP key or S/MIME certificate. Encryption Management Server will use these keys or certificates when sending encrypted mail to external users.
2. The Verified Directory service allows external users to upload their PGP key and search for the public keys of internal users.
3. External users can upload their PGP key to the PGP Global Directory. Encryption Management Server will search the PGP Global Directory when sending encrypted mail to external users.

Symantec Corporation is committed to product quality and satisfied customers. This issue is currently being considered by Symantec Corporation to be addressed in a forthcoming version or Maintenance Pack of the product. Please be sure to refer back to this document periodically as any changes to the status of the issue will be reflected here.