Encryption Management Server - System Requirements

book

Article ID: 161119

calendar_today

Updated On:

Products

Encryption Management Server Gateway Email Encryption

Issue/Introduction

This article lists the current system requirements and certified hardware list for Symantec Encryption Management Server 3.3.2. This article will be updated as additional platforms or other system requirements are tested and added for Symantec Encryption Management Server.

For client system requirements and platform updates, refer to the following KB articles:

TECH224417: Encryption Desktop for Mac OS X: http://www.symantec.com/docs/TECH224417

TECH224415: Encryption Desktop for Windows: http://www.symantec.com/docs/TECH224415

TECH224419: Drive Encryption for Linux: http://www.symantec.com/docs/TECH224419

Resolution

Symantec Encryption Management Server can be installed on the following systems:

System Requirements for 3.3.2 GA Release

Supported Client and Symantec Encryption Management Server Version Combinations

Mail Server Requirements

Symantec Encryption Management Server Administrative Interface

Supported Mobile Platforms for Symantec Encryption Web Email Protection

Symantec Encryption Satellite

Supported External Authentication



Symantec Encryption Management Server is a customized Linux OS installation and cannot be installed on a Windows server. Every Symantec Encryption Management Server requires a dedicated system that meets the system requirements listed below. The installation process deletes all data on the system and reconfigures it as a Symantec Encryption Management Server.

Updates

Platform \ Functionality Added Added in Release Date Support Added
Removed support for Microsoft Internet Explorer 8* MP12 February 18, 2016
VMware ESXi 5.5 and VMware ESXi 6.0 MP11 October 29, 2015

*Note: Microsoft Internet Explorer 8 is no longer a supported web browser for performing any Symantec Encryption Management Server operations. For example, viewing the Symantec Encryption Management Server Online Help, performing the administrative tasks on the server, accessing the Web Email Protection, and so on.

The following hardware systems are added to the Symantec Encryption Management Server Certified Hardware List effective February 2016:

  • Dell PowerEdge R820
    Note: This system is certified on Red Hat Enterprise Linux version 5. This system might not be supported in the next minor release version of Symantec Encryption Management Server as the next release will be certified for later versions of Red Hat Enterprise Linux.
     
  • HP ProLiant DL320e Gen8 v2
     
  • HP ProLiant DL385p Gen8
     
  • IBM BladeCenter HS23E
     
  • IBM System x3250 M5

Symantec Encryption Management Server Certified Hardware List – Valid January 25, 2014 through July 1, 2016

You must obtain the latest version of this list for hardware purchasing decisions after July 1, 2016. The following systems are certified as the hardware for Symantec Encryption Management Server:

  • Dell PowerEdge R320 - Intel XEON E5-2430 @ 2.2 GHz - 12 GB RAM
    Two 500 GB 7200 RPM SATA - PERC H310 Internal HD controller
    Broadcom BCM5720 network controller
    Small/medium environment production unit
     
  • Dell PowerEdge R720 - Two Intel XEON E5-2640 @ 2.5 GHz – 16 GB RAM
    Two 300 GB 10K RPM SAS - PERC H310 RAID
    Broadcom BCM5720 network controller
    Medium/large environment production unit, cluster member
     
  • HP Proliant DL160 G8 - Intel XEON E5-2620 @ 2.0 GHz - 16 GB RAM
    Two 500 GB 7200 RPM SATA
    Intel I350 network controller
    Small/medium environment production unit
     
  • HP Proliant DL385 G8- Two AMD Opteron 6376 @ 2.3 GHz - 16 GB RAM
    Two 300 GB 15K RPM SAS HDD - HP Smart Array P420i RAID
    Broadcom BCM5719 network controller
    Medium/large environment production unit, cluster member
     
  • IBM BladeCenter HS22 - Two Intel XEON E5607 @ 2.4 GHz - 16 GB RAM
    Two 300 GB 10K 6 Gbps SAS - ServeRAID MR10ie RAID
    Intel 10-Gigabit 82599EB chipset network controller
    Medium/large environment production unit, cluster member
     
  • IBM System x3250 M4 - Intel XEON E3-1230v2 @ 3.3 GHz - 16 GB RAM
    Four 300 GB 10K 6Gbps SAS 2.5" - LSI SAS 2004 RAID
    Broadcom NetXtreme i Quad Port GbE with BCM5719 chipset network controller
    Medium/large environment production unit, cluster member
     
  • IBM System x3650 M4 - Two Intel XEON E5-2630 @ 2.3 GHz - 16 GB RAM
    Four 300 GB SAS 10K RPM - IBM ServeRAID-M5110e RAID
    Intel I350 network controller
    Medium/large environment production unit, cluster member
     
  • VMware vSphere 5.1 - Supported platform, non-hardware.
    Sufficient processing power equivalent to a 3 GHz Intel Xeon must be dedicated to the Symantec Encryption Management Server virtual machine.
    VMware Tools must be installed and configured in the Symantec Encryption Management Server operating system.

    Disk space requirements:
     
    • Small/medium environment - 50 GB minimum allocated to the VMware instance; 4 GB RAM dedicated to the VMware instance.
       
    • Medium/large environment - 150 GB minimum allocated to the VMware instance; 8 GB RAM dedicated to the VMware instance.
       
  • VMware vSphere Hypervisor (ESXi) 5.1 with VMotion Support - Supported platform, non-hardware
     
    • VMware HA Configuration: Host Monitoring - Enabled; VM Monitoring - Disabled; Application Monitoring - Disabled
    • VMware DRS Configuration: Migration Automation Level - Fully automated; Power Management Automation Level - Off; Migration Threshold - Apply all recommendations.

Although a broad array of other hardware may work well with Symantec Encryption Management Server, Symantec Encryption Management Server has been tested with, and is compatible with, the systems in this list.

Note: There is a possibility that when RAID is enabled on some of these systems, it might cause  issues with Symantec Encryption Management Server. To resolve this issue disable RAID.

Note: Symantec Encryption Management Server supports additional memory beyond the minimum requirement but not exceeding 16 gigabytes.

To qualify as Symantec Encryption Management Server Certified Hardware, the server must be one of the versions listed and all components must be configured as specified. For Support purposes, if you change the sizes of hard disks in the same type of drive (for example, 36 GB SCSI to 73 GB SCSI), increasing memory configurations and processor speeds in the same type and family qualifies as the same system.

Supported Client and Symantec Encryption Management Server Version Combinations

Symantec Corporation supports backward compatibility for clients only. Symantec Encryption Management Server 3.3.2 supports managing policy of these versions and subsequent maintenance releases for each of the following:

PGP Desktop

  • 10.0.0
  • 10.0.1
  • 10.0.2
  • 10.1.0
  • 10.2.0
  • 10.2.1
  • 10.2.1 MP5
     

Symantec Encryption Desktop

  • 10.3.0
  • 10.3.1
  • 10.3.1 MP1
  • 10.3.2
     

Note: Limited backward compatibility support means that legacy features, such as enrollment, policy download, logging and reporting are supported, but legacy clients cannot access the latest client features in Consumer Policy.

We recommend that you upgrade your Symantec Encryption Management Server and your clients, so that they are eventually on the same release. For the most current information on which client versions are supported, see the Knowledge Base.

Jump to Top

Mailserver Requirements

Symantec Encryption Management Server supports the following mailservers:

  • Microsoft Exchange Server 2013 Cumulative Update 2 (CU2)
  • Microsoft Exchange 2010 SP1
  • Microsoft Exchange Server 2007
  • Microsoft Exchange Server 2003 SP2
  • Lotus Domino Server 8.5.3
     

Mailservers not on this list may not be fully compatible or supported.

Microsoft Exchange Server 5.5 is not a supported mailserver and has known incompatibilities, such as with LDAP Directory Synchronization.
 

Symantec Encryption Management Server Administrative Interface Web Browser Requirements

The Symantec Encryption Management Server administrative interface has been fully tested with the following Web browsers:

Windows

  • Internet Explorer 8 through 11 On Microsoft Windows Server 2012 systems, the Allow META REFRESH option is disabled by default. This option must be enabled for the web interface to work correctly with Internet Explorer 10. If you are using Internet Explorer on Windows Server 2012, from Tools > Internet Options, select the Security tab and click Custom level. Enable Miscellaneous > Allow META REFRESH.
     

Mac OS X

  • Firefox 20 through 23
  • Safari 5.1 through 6.0
  • Firefox 20 through 23
     

Although the administrative interface works with other Web browsers, we recommend these browsers for maximum compatibility.
 

Symantec Encryption Web Email Protection Web Browser Requirements

Windows

  • Internet Explorer 8 through 11
  • Firefox 20 through 23
     

Mac OS X

  • Safari 5.1 through 6.0
  • Firefox 20 through 23
     

Jump to Top

Supported Mobile Platforms for Symantec Encryption Web Email Protection and Symantec Encryption PDF Email Protection

Symantec Encryption Web Email Protection and Symantec Encryption PDF Email Protection support the following platforms for Smartphones and Tablets:

Smartphone System Requirements

 Operating System  Device  Web Browser
 Android 2.3.6  Galaxy S II  Default Android 2 Browser
 iOS 5.0.1  iPhone 4S  Safari 5.1
 Android 4.0.3  HTC One X  Chrome 18 / Default Android 4 Browser

 
Tablet System Requirements

 Operating System  Device  Web Browser
 iOS 5.1.1  iPad3  Safari 5.1

 

Note: Support of Symantec Encryption Web Email Protection/Symantec Encryption PDF Email Protection features may be limited by the functionality of the operating systems.

Symantec Encryption Satellite

Symantec Encryption Satellite for Windows Requirements

Before you install, you must verify that your system meets these minimum requirements:

Microsoft Windows versions:

  • Windows 8.1 Enterprise (32-bit and 64-bit versions)
  • Windows 8.1 Pro (32-bit and 64-bit versions)
  • Windows 8 Enterprise (32-bit and 64-bit versions)
  • Windows 8 Pro (32-bit and 64-bit versions)
  • Windows 7 (32-bit and 64-bit versions, including Service Pack 1)
  • Windows Vista (32-bit and 64-bit versions, including Service Pack 2)
  • Windows XP Professional 32-bit (Service Pack 3)
  • Windows XP Professional 64-bit (Service Pack 2)

    Note: The above operating systems are supported only when all of the latest hot fixes and security patches from Microsoft have been applied.
     
  • 512 MB of RAM
  • 64 MB hard disk space
  • Internet Explorer 8 through 11
  • Mozilla Firefox 20 through 23
     

Symantec Encryption Satellite for Mac OS X Requirements

  • Apple Mac OS X 10.9.1, 10.9, 10.8.5, 10.8.4
  • 512 MB of RAM
  • 80 MB hard disk space
     

Supported External Authentication Products

Symantec Encryption Management Server is compatible with the following LDAP directory products:

  • Microsoft Active Directory 2012
  • Microsoft Active Directory 2008
  • Microsoft Active Directory 2003
  • Lotus Notes/Domino Directory 8.5.3
  • OpenLDAP 4.x
     

For directory synchronization, Symantec Encryption Management Server supports:

  • LDAPv3
  • LDAPv2
  • LDAPS
     

For Symantec Encryption Web Email Protection external authentication, Symantec Encryption Management Server supports:

  • LDAPv3
  • LDAPv2
  • RSA Radius Server with RSA Authentication Manager 7.1
     

Anti-Virus Software Compatibility

For information about antivirus compatibility, see the Symantec Encryption Desktop for Windows Release Notes or the Symantec Encryption Desktop for Mac OS X Release Notes.

Jump to Top