On May 3, 2021, Symantec will end of life the following Information Centric Encryption (ICE) products
This also impacts customers who have the following products as ICE is also part of these bundles.
What it means to you?
You have multiple options, based on the level of security you wish to maintain over sensitive or confidential files currently encrypted with ICE. You can use different options for different groups of users. For example, you might provide access to all files for some users, but restrict access to all files for other users.
If your users still have files that are ICE-encrypted after May 3, 2021, you can use the ICE Offline Decryption Utility to decrypt them. Download the ICE Offline Decryption Utility from the Downloads page of the ICE Cloud Console. You will also need to download the private key that your version of ICE originally used to encrypt the files. Refer to the instructions included in the download package for details on how to run the utility.
Important: The download links for the ICE Offline Decryption Utility and the private key will not be available after the ICE EOL date. In order to use this utility, you must download the ICE Offline Decryption Utility and the private key before May 3, 2021.
Important: This private key can decrypt any files that your ICE account originally encrypted. Store this private key in a secure place. You have the option of setting a password for this private key when you download it from the ICE Cloud Console. If you set a password, store it in a safe place separate from the private key. You will need the password to decrypt any ICE-encrypted file with the ICE Offline Decryption Tool and the private key.
The ICE Offline Decryption Utility lets you decrypt any files originally encrypted by your implementation of ICE. To decrypt a file that your implementation of ICE encrypted, you need the following:
The ICE Offline Decryption Tool and your ICE private key are available from the Downloads page of your ICE Cloud Console.
The ICE Offline Decryption Utility is a Windows-based, command line utility. Complete the following steps to decrypt an ICE-encrypted file:
icedecryptor.exe --decrypt <input-file> --output <output-file> --key <private-key-file> --password <password>
icedecryptor.exe --decrypt 2019_marketing_press_release.html -–output 2019_marketing_press_release.txt –-key colossal_corp_key.pem –-password W34R!t88g
The utility decrypts the file and writes it to the same directory, using the file name that you provided.
The ICE Offline Decryption Utility can provide details about an ICE-encrypted file without decrypting it. Complete the following steps to use the utility to view file details:
icedecryptor.exe --show-info <input-file>
Where <input-file> is the name of the ICE-encrypted file.
icedecryptor.exe --show-info 2019_marketing_press_release.html
The utility displays the following information about the file: