PGP Encryption Desktop cannot import keys in a Citrix VDI

Products

• Encryption Management Server
• Desktop Email Encryption
• File Share Encryption
• PGP Command Line
• PGP Encryption Suite
• PGP Key Management Server
• PGP Key Mgmt Client Access and CLI API
• PGP SDK
• Drive Encryption
• Endpoint Encryption
• Gateway Email Encryption

Issue/Introduction

If a user is using a Citrix VDI (Virtual Desktop Infrastructure) they cannot import keys into their PGP Encryption Desktop keyring.

No error message is displayed. Keys just fail to be imported.

Environment

PGP Encryption Desktop and PGP Encryption Server release 10.5 and above.

Cause

The only VDI certified for PGP Encryption Desktop are VMware ESXi virtual machines.

Resolution

This workaround may allow PGP Encryption Desktop to import keys:

1. From the PGP Encryption Server management console, navigate to Consumers / Consumer Policy and click on the user's policy name.
2. Click on the Desktop button.
3. In the General tab, the Override default keyring locations option is, by default, not configured:
   
4. Enable the option PGP Encryption Desktop for Windows and in the location field, enter a folder name within %APPDATA% such as %APPDATA%\PGP:
   
5. Re-enroll the user.

The %APPDATA% environment variable usually refers to the folder C:\Users\username\AppData\Roaming where username is the user's Windows username. The PGP Desktop  PGPprefs.xml configuration file, PGPpolicy.xml file, log files, etc reside in "%APPDATA%\PGP Corporation\PGP".

By default, the local keyring is stored in %HOMEPATH%\Documents\PGP which usually refers to the folder C:\Users\username\Documents. However, this folder is unsuitable for storing keyrings in some environments.

Additional Information

157763 - Enrollment Prompt appears in Virtual Environments - VI / VMware View Persona Management / Dell Wyse vWorkspace and Symantec Encryption Desktop