How To Install PGP Encryption Desktop for Windows (Unmanaged/Standalone)
Article ID: 178346
Updated On:
Products
Issue/Introduction
Cause
Resolution
This article includes all the steps necessary to install the PGP Encryption Desktop client. All points will be discussed, including where to download the software, as well as performing the actual installation.
Note: Click the links in the Table of Contents below to skip directly to each topic discussed in this article.
Table of Contents
Encryption Desktop for Windows - System Requirements
Considerations and Best Practices
Downloading Symantec Encryption Desktop
Finding Your Serial Number or License Number
Extracting the Downloaded File
Installing Symantec Encryption Desktop
PGP Encryption Desktop for Windows - System Requirements
For all information related to PGP Encryption Desktop system requirements, including compatible Operating Systems, see this information .
Hardware Requirements
- 1 GB of RAM
- 300 MB of free disk space available
Compatible Virtual Servers
- VMware ESXi 5.1 (64-bit version)
If it is needed to uninstall the PGP Encryption Desktop client, you can do so from the Add/Remove/appwiz.cpl UI.
For more information, please reach out to Symantec Encryption Support.
Considerations and Best Practices
Additional Requirements for Drive Encryption on UEFI Systems
The following requirements apply only if you are encrypting your disk. If you are installing PGP Encryption Desktop for email or other PGP Encryption Desktop functions, you can install on Windows 8/8.1 32-bit systems and boot using UEFI mode without having to meet these requirements. To encrypt systems booting in UEFI mode, the following additional requirements must be met:
- System must be certified for Microsoft Windows 8/8.1 64-bit or Microsoft Windows 7 64-bit
- UEFI firmware must allow other programs or UEFI applications to execute while booting
- Boot drive must be partitioned in GPT with only one EFI system partition on the same physical disk
- Boot drive must not be configured with RAID or Logical Volume Managers (LVM)
- Tablets and any systems without a wired or OEM-supplied attachable keyboard are not supported For more information on the firmware and boot drive, contact your system administrator or hardware manufacturer.
Note:PGP Drive Encryption is not compatible with other third-party software that could bypass the PGP Drive Encryption protection on the Master Boot Record (MBR) and write to or modify the MBR. This includes such offline defragmentation tools that bypass the PGP Drive Encryption file system protection in the OS or system restore tools that replace the MBR.
For more information about requirements for UEFI systems, see article 153530, "Best Practices: Symantec Endpoint Encryption and PGP Drive Encryption".
PGP Drive Encryption on Windows Servers
PGP Drive Encryption is supported on all of the following Windows Server versions:
- Windows Server 2012 R2 64-bit Edition with internal RAID 1 and RAID 5
- Windows Server 2012 64-bit Edition with internal RAID 1 and RAID 5
- Windows Server 2008 R2 64-bit Edition with internal RAID 1 and RAID 5
- Windows Server 2008 64-bit Edition (Service Pack 1 and Service Pack 2) with internal RAID 1 and RAID 5
Note: Dynamic disks and software RAID are not supported.
For additional system requirements and best practices information for use on Windows Servers, see article 153563 "Drive Encryption on Windows Servers"
The following best practices prior to the installation of PGP Encryption Desktop:
- Review the Release Notes and User's Guides for PGP Encryption Desktop system requirements.
- Run Microsoft Windows update.
- Back up your computer before you install or upgrade any software, including Encryption Desktop.
- Defragment your disk.
Downloading PGP Encryption Desktop
Starting with PGP Encryption Desktop version 11, it is no longer possible to download the client from the Broadcom Download Portal.
If you have a requirement to create a PGP Encryption Desktop client that will never communicate with the PGP Encryption Server, you can download the client after "Unchecking" the customize box from the PGP Encryption Management Server:
When you download this client from the PGP Encryption Server, the end user will need to enter their own license number, as well as control their own policy.
This gives the end user full control of the client, which is not typically recommended for larger organizations.
Finding your Serial number or License Number:
You should have received your Serial and License numbers in emails sent from Symantec. If you have not received your Serial or License numbers for your Symantec Encryption products, or if you have questions or concerns related to getting your Serial or License numbers, please contact Broadcom Customer Care.
Important Note: To find out how to download Symantec Encryption Desktop, see article 193931
- Save the file to your local computer (versions will differ):
Installing Symantec Encryption Desktop (standalone or unmanaged)
Extracting the Installer
- Double click to open the downloaded zip file (ex. SymantecEncryptionDesktop10.3.0mp3_Windows.zip)
- Select to extract all files
- Choose file location and extract the installation and documentation to the local file system.
Installing the Application
Before installing the application determine if the Operating System is 32-bit or 64-bit.
- Double click to open the extracted archive
Double-click the correct installer for you Operating System (32-or 64-bit)
- Select the proper language and hit OK button
- Review the End User License Agreement.
- Once you accept the License Agreement, then select the radio button and click the Next button.
- Click next to not have the release Notes displayed after install. (If you want the release notes to display after install, select the radio button to Display the Release Notes)
- Next the installer will run through the installation process.
- If the following message is displayed the wrong installer was select. Select the other installation file.
- If the following message is displayed select yes
- Reboot of the system is required. Select the Yes button to initiate reboot or select No and reboot at a later time.
After the reboot of system it is necessary to run through the Configuration Wizard to enable the features within Symantec Encryption Desktop that you wish to use.
After the Reboot - Walking through the Setup Assistant
1. First, a wizard will be displayed and will ask to enable the encryption software on the computer. Select Yes.
2. Click Next until the License Window appears. The License number that is needed is a 28-digit string of numbers and letters and was mentioned in the section:
Finding Your Serial Number or License Number
3. If a name and organization is displayed, enter any value (any value will be accepted). Starting with 10.3.2 MP8, it is no longer necessary to enter a name and organization.
Example: D322M-TG45K-AABTZ-GGHH3-443LU-1QA
4. Copy and paste the entire 28-digit string of numbers and letters and paste into the field (The entire 28-digit string will paste into all the individual boxes).
5. Select the option, "I am a new user" and click Next.
6. When the key generation wizard pops up, click "Skip" if this is Symantec Drive Encryption only, and no File Encryption, File Share Encryption, or Email Encryption is needed. If any of these features will be used, enter the appropriate values, and click next.
7. If you would like to publish your key to the public keyserver, choose this option, but otherwise, click "Skip" (recommended in most situations).
8. If Email Encryption is not needed, uncheck the options when they are displayed.
9. Follow the on-screen instructions and click Finish to complete the Setup Assistant.
For a complete walk-through on how to encrypt a system hard drive with Symantec Encryption Desktop, see article 178547.
Feedback
