PGP Symantec File Share Encryption: Active Directory Group Assigned via Command Line Not Displayed in File Share Properties.

Products

• Endpoint Encryption
• Desktop Email Encryption
• Drive Encryption
• Encryption Management Server
• File Share Encryption
• Gateway Email Encryption
• Policy Based Encryption

Issue/Introduction

File share encryption successfully encrypts a folder  using the pgpnetshare command-line utility and assigns an Active Directory (AD) group (for example pgptest) to grant encrypted access to all users within that group.

The command-line output confirms that the Access Control Lists (ACLs) are applied correctly and encryption is successful.

However, when viewing the folder properties under Symantec File Share Encryption, the assigned AD group does not appear in the list of configured groups.

Further observation shows:

• Encryption performed through the UI correctly updates and displays ACLs in both the command line and the Symantec File Share Encryption properties.

• Encryption performed via the command line correctly updates the ACLs, but the assigned AD group is not reflected in the UI.

This behavior may lead to confusion, as the UI does not accurately display the applied group permissions even though encryption and access control are functioning as expected.

Reference Screenshot:

Environment

PGP 11.0.1, 11.0.1 HF1, 11.5

Resolution

This is being reviewed to be resolved in a future release of PGP Encryption products.

Alternatively, you can use the pgpnetshare --list command to see the list of keys used. 

EPG-39929