10 Before You Install the PGP WDE Controller
Before You Begin
You must import the file into PGP WDE Controller before you can create .MSI files.
For instructions to create a PGP keypair with PGP Desktop, see "Creating a PGP
Keypair," in the PGP Desktop User's Guide.
Create an accessible shared folder on the network.
This folder stores the log files, WDRTs, and updated policies for all of the PGP
Whole Disk Encryption installations. The shared folder must be accessible by all
installations of the deployment, and should be Common Internet File System
(CIFS) compliant.
Although using a shared folder is highly recommended, it is not required. When
not using a shared folder, for example in a very small workgroup situation where a
share is unavailable, the WDRTs are encrypted to the PGP WDE administrator key
and stored on the local disk. In these situations, you might need to instruct the
user to send the WDRT to the administrator for safekeeping in the event the user
loses the passphrase or needs help accessing the system.
Note: When not using a shared folder both WDRTs and log files are stored on the
local disk of the client system. The WDRTs are stored in the user’s application
data directory at \Documents and Settings\User Name\Application Data\PGP
Corporation\PGP\WDRT\. The log files are stored in \Documents and
Settings\User Name\Application Data\PGP Corporation\PGP\.
When using such a shared folder, make sure the systems on which you are
installing PGP Whole Disk Encryption are on the network at the time of initial
encryption so that the WDRT is successfully delivered to the shared folder. If the
system is not on the network, the WDRT gets encrypted to the PGP WDE
administrator key and is queued to be sent the next time it connects to the
network. In such a situation, if the user forgets their passphrase before the WDRT
gets delivered to the share, the user is prevented from using a WDRT remotely,
leaving a PGP WDE administrator key (used with a smart card or token) as the only
option for remote access.
Make sure your license information is accessible from the system which you
intend to run PGP WDE Controller.
When you purchased the product, you received an email order confirmation with
an attached .PDF file. Make a note of the name, organization, and license number
you received in the email order confirmation. These are shown in the section titled
Important Note in the .PDF. Your license number also appears on the download
page of your PGP product.
Place the PGPWholeDiskEncryptionController.exe file in an accessible
location on the system from which you intend to run PGP WDE Controller.
Create backups of the systems to which you intend to deploy PGP WDE.
Related Topics
About PGP WDE Administrator Keys (on page 11)
About the Shared Network Folder (on page 12)
About Whole Disk Recovery Tokens (on page 12)
About Single Sign-On (on page 13)
About PGP BootGuard Customization (on page 14)