Troubleshooting performance problems on PGP Encyption Management Server.
Article ID: 181085
Updated On:
Products
Symantec Products
Desktop Email Encryption
Drive Encryption
Encryption Management Server
Endpoint Encryption
File Share Encryption
Gateway Email Encryption
PGP Encryption Suite
Policy Based Encryption
PGP Command Line
Issue/Introduction
Troubleshooting performance issues on the PGP Encryption Management Server.
Resolution
This article describes how to troubleshoot performance problems on PGP Encryption Management Server.
For solving generic performance problems
Verify hardware, kernel type, swap size
1. Ensure that the server hardware is one of the certified hardware platforms as described in the certified hardware list. This list is located in PGP Encryption Management Server System Requirements.
2. PGP Encryption Management Server must be booted from a PAE kernel so that a maximum of 16GB memory can be used.
3. Check if there is sufficient swap size.
The recommended swap size can be calculated using the following formula:
Amount of Physical Memory Swap Space Multiplier
======================== =====================
1GB to 2GB 2x
2GB to 8GB 1x
8GB to 16GB 0.67x
Increase the swap size if the current swap size is less than recommended.
For solving problems specific to PGP Encryption Management Server
When server performance is slow
Check log levels
Too much logging reduces PGP Encryption Management Server’s performance. Log Level should only be changed if request by Symantec Encryption Support. If you need to check the Logging Level of the PGP Encryption Management Server, please open a case by following this article:
When mail and other communications are slow
In an ATM environment
If you are running PGP products in an asynchronous transfer mode (ATM) environment and experiencing slow mail communication, but your CPU performance is still reasonable, make sure that you have adequate bandwidth allocated to the mail flow. In ATM environments, manually allocate bandwidth amounts for various purposes.
If you see a lot of queuing, ensure that you have adequate bandwidth.
Using DNS configurations
Proper Domain Name System (DNS) configuration ensures that the software performs as intended. PGP Universal Server interfaces require both forward and reverse lookups with the DNS server. Without both records, you might encounter reduced performance.
Using NICs
To ensure that the communication between PGP Universal Server and the clients is as efficient as possible, the network interface cards (NICs) on PGP Universal Server and the switch must match in speed and duplex type. For example, if one side is 100Mbps full duplex, the other side also must be 100Mbps full duplex.
Note: If PGP Universal Server is installed on a VMware system, install VMware Tools to ensure full-duplex communication.
When the NICs do not match, auto-negotiation problems result in:
· Slow mail
· Many retries
· Multiple packet collisions followed by retries
If the NICs do not match, replace one or both so that they do match. Symantec recommends using NICs that are full duplex and as fast as possible.
Turn off auto-negotiation using the following command:
ethtool -s eth0 autoneg off
For further assistance please contact Symantec Encryption Support by following this article:
Feedback
Yes
No
Powered by
