PGP Universal Server 2.1 User guide

Category
Software
Type
User guide
PGP Universal Server
Administrator's Guide
Version Information
PGP Universal Server Administrator's Guide. PGP Universal Server Version 2.10.0. Released February 2009.
Copyright Information
Copyright © 1991-2009 by PGP Corporation. All Rights Reserved. No part of this document can be reproduced or transmitted in any form or by any
means, electronic or mechanical, for any purpose, without the express written permission of PGP Corporation.
Trademark Information
PGP, Pretty Good Privacy, and the PGP logo are registered trademarks of PGP Corporation in the US and other countries. IDEA is a trademark of
Ascom Tech AG. Windows and ActiveX are registered trademarks of Microsoft Corporation. AOL is a registered trademark, and AOL Instant
Messenger is a trademark, of America Online, Inc. Red Hat and Red Hat Linux are trademarks or registered trademarks of Red Hat, Inc. Linux is a
registered trademark of Linus Torvalds. Solaris is a trademark or registered trademark of Sun Microsystems, Inc. AIX is a trademark or registered
trademark of International Business Machines Corporation. HP-UX is a trademark or registered trademark of Hewlett-Packard Company. SSH and
Secure Shell are trademarks of SSH Communications Security, Inc. Rendezvous and Mac OS X are trademarks or registered trademarks of Apple
Computer, Inc. All other registered and unregistered trademarks in this document are the sole property of their respective owners.
Licensing and Patent Information
The IDEA cryptographic cipher described in U.S. patent number 5,214,703 is licensed from Ascom Tech AG. The CAST-128 encryption algorithm,
implemented from RFC 2144, is available worldwide on a royalty-free basis for commercial and non-commercial uses. PGP Corporation has secured a
license to the patent rights contained in the patent application Serial Number 10/655,563 by The Regents of the University of California, entitled Block
Cipher Mode of Operation for Constructing a Wide-blocksize block Cipher from a Conventional Block Cipher. Some third-party software included in PGP
Universal Server is licensed under the GNU General Public License (GPL). PGP Universal Server as a whole is not licensed under the GPL. If you would
like a copy of the source code for the GPL software included in PGP Universal Server, contact PGP Support (
https://pgp.custhelp.com). PGP
Corporation may have patents and/or pending patent applications covering subject matter in this software or its documentation; the furnishing of this
software or documentation does not give you any license to these patents.
Acknowledgments
This product includes or may include:
z The Zip and ZLib compression code, created by Mark Adler and Jean-Loup Gailly, is used with permission from the free Info-ZIP implementation,
developed by zlib (
http://www.zlib.net). z Libxml2, the XML C parser and toolkit developed for the Gnome project and distributed and copyrighted
under the MIT License found at
http://www.opensource.org/licenses/mit-license.html. Copyright © 2007 by the Open Source Initiative. z bzip2 1.0, a
freely available high-quality data compressor, is copyrighted by Julian Seward, © 1996-2005. z Application server (
http://jakarta.apache.org/), web
server (
http://www.apache.org/), Jakarta Commons (http://jakarta.apache.org/commons/license.html) and log4j, a Java-based library used to parse
HTML, developed by the Apache Software Foundation. The license is at
www.apache.org/licenses/LICENSE-2.0.txt. z Castor, an open-source, data-
binding framework for moving data from XML to Java programming language objects and from Java to databases, is released by the ExoLab Group
under an Apache 2.0-style license, available at
http://www.castor.org/license.html. z Xalan, an open-source software library from the Apache Software
Foundation that implements the XSLT XML transformation language and the XPath XML query language, is released under the Apache Software
License, version 1.1, available at
http://xml.apache.org/xalan-j/#license1.1. z Apache Axis is an implementation of the SOAP ("Simple Object Access
Protocol") used for communications between various PGP products is provided under the Apache license found at
http://www.apache.org/licenses/LICENSE-2.0.txt. z mx4j, an open-source implementation of the Java Management Extensions (JMX), is released
under an Apache-style license, available at
http://mx4j.sourceforge.net/docs/ch01s06.html. z jpeglib version 6a is based in part on the work of the
Independent JPEG Group. (
http://www.ijg.org/) z libxslt the XSLT C library developed for the GNOME project and used for XML transformations is
distributed under the MIT License
http://www.opensource.org/licenses/mit-license.html. z PCRE version 4.5 Perl regular expression compiler,
copyrighted and distributed by University of Cambridge. ©1997-2006. The license agreement is at
http://www.pcre.org/license.txt. z BIND Balanced
Binary Tree Library and Domain Name System (DNS) protocols developed and copyrighted by Internet Systems Consortium, Inc. (
http://www.isc.org)
z Free BSD implementation of daemon developed by The FreeBSD Project, © 1994-2006. z Simple Network Management Protocol Library developed
and copyrighted by Carnegie Mellon University © 1989, 1991, 1992, Networks Associates Technology, Inc, © 2001- 2003, Cambridge Broadband Ltd.
© 2001- 2003, Sun Microsystems, Inc., © 2003, Sparta, Inc, © 2003-2006, Cisco, Inc and Information Network Center of Beijing University of Posts
and Telecommunications, © 2004. The license agreement for these is at
http://net-snmp.sourceforge.net/about/license.html. z NTP version 4.2
developed by Network Time Protocol and copyrighted to various contributors. z Lightweight Directory Access Protocol developed and copyrighted by
OpenLDAP Foundation. OpenLDAP is an open-source implementation of the Lightweight Directory Access Protocol (LDAP). Copyright © 1999-2003,
The OpenLDAP Foundation. The license agreement is at
http://www.openldap.org/software/release/license.html. Secure shell OpenSSH version 4.2.1
developed by OpenBSD project is released by the OpenBSD Project under a BSD-style license, available at
http://www.openbsd.org/cgi-
bin/cvsweb/src/usr.bin/ssh/LICENCE?rev=HEAD. z PC/SC Lite is a free implementation of PC/SC, a specification for SmartCard integration is released
under the BSD license. z Postfix, an open source mail transfer agent (MTA), is released under the IBM Public License 1.0, available at
http://www.opensource.org/licenses/ibmpl.php. z PostgreSQL, a free software object-relational database management system, is released under a
BSD-style license, available at
http://www.postgresql.org/about/licence. z PostgreSQL JDBC driver, a free Java program used to connect to a
PostgreSQL database using standard, database independent Java code, (c) 1997-2005, PostgreSQL Global Development Group, is released under a
BSD-style license, available at
http://jdbc.postgresql.org/license.html. z PostgreSQL Regular Expression Library, a free software object-relational
database management system, is released under a BSD-style license, available at
http://www.postgresql.org/about/licence. z 21.vixie-cron is the Vixie
version of cron, a standard UNIX daemon that runs specified programs at scheduled times. Copyright © 1993, 1994 by Paul Vixie; used by permission.
z JacORB, a Java object used to facilitate communication between processes written in Java and the data layer, is open source licensed under the
GNU Library General Public License (LGPL) available at
http://www.jacorb.org/lgpl.html. Copyright © 2006 The JacORB Project. z TAO (The ACE ORB)
is an open-source implementation of a CORBA Object Request Broker (ORB), and is used for communication between processes written in C/C++ and
the data layer. Copyright (c) 1993-2006 by Douglas C. Schmidt and his research group at Washington University, University of California, Irvine, and
Vanderbilt University. The open source software license is available at
http://www.cs.wustl.edu/~schmidt/ACE-copying.html. z libcURL, a library for
downloading files via common network services, is open source software provided under a MIT/X derivate license available at
http://curl.haxx.se/docs/copyright.html. Copyright (c) 1996 - 2007, Daniel Stenberg. z libuuid, a library used to generate unique identifiers, is released
under a BSD-style license, available at
http://thunk.org/hg/e2fsprogs/?file/fe55db3e508c/lib/uuid/COPYING. Copyright (C) 1996, 1997 Theodore Ts'o. z
libpopt, a library that parses command line options, is released under the terms of the GNU Free Documentation License available at
http://directory.fsf.org/libs/COPYING.DOC. Copyright © 2000-2003 Free Software Foundation, Inc. z gSOAP, a development tool for Windows clients
to communicate with the Intel Corporation AMT chipset on a motherboard, is distributed under the GNU Public License, available at
http://www.cs.fsu.edu/~engelen/soaplicense.html. z Windows Template Library (WTL) is used for developing user interface components and is
distributed under the Common Public License v1.0 found at
http://opensource.org/licenses/cpl1.0.php. z The Perl Kit provides several independent
utilities used to automate a variety of maintenance functions and is provided under the Perl Artistic License, found at
http://www.perl.com/pub/a/language/misc/Artistic.html. z rEFIt - libeg, provides a graphical interface library for EFI, including image rendering, text
rendering, and alpha blending, and is distributed under the license found at
http://refit.svn.sourceforge.net/viewvc/*checkout*/refit/trunk/refit/LICENSE.txt?revision=288. Copyright (c) 2006 Christoph Pfisterer. All rights
reserved. z Java Radius Client, used to authenticate PGP Universal Web Messenger users via Radius, is distributed under the Lesser General Public
License (LGPL) found at
http://www.gnu.org/licenses/lgpl.html.
Export Information
Export of this software and documentation may be subject to compliance with the rules and regulations promulgated from time to time by the Bureau
of Export Administration, United States Department of Commerce, which restricts the export and re-export of certain products and technical data.
Limitations
The software provided with this documentation is licensed to you for your individual use under the terms of the End User License Agreement provided
with the software. The information in this document is subject to change without notice. PGP Corporation does not warrant that the information meets
your requirements or that the information is free of errors. The information may include technical inaccuracies or typographical errors. Changes may be
made to the information and incorporated in new editions of this document, if and when made available by PGP Corporation.
4
15
Contents
Introduction
What is PGP Universal Server? 15
PGP Universal Server Product Family 16
Who Should Read This Guide 16
Common Criteria Environments 17
Improvements in This Version of PGP Universal Server 17
Using the PGP Universal Server with the Command Line 17
Symbols 18
Getting Assistance 18
Getting product information 18
Contact information 19
The Big Picture 21
Important Terms 21
PGP Products 21
PGP Universal Server Concepts 21
PGP Universal Server Features 22
PGP Universal Server User Types 24
Installation Overview 25
Adding the PGP Universal Server to Your Network 31
Server Placement 31
Gateway Placement 32
Internal Placement 33
Using a Mail Relay 34
Microsoft Exchange Server 34
Lotus Domino Server 34
Configuration Examples 35
Internal Placement Configuration 36
Gateway Placement Configuration 37
Non-mailstream Placement Configuration 38
Cluster Configuration 39
Clustered Proxy and Keyserver Configuration 40
Gateway Cluster with Load Balancer 42
Gateway and Internal Placement Cluster 43
Encircled Configuration 45
Large Enterprise Configuration 46
Spam Filters and PGP Universal Server 47
Exchange with PGP Client Software 48
Lotus Domino Server with PGP Client Software 49
Unsupported Configurations 49
i
PGP Universal Server Contents
Open Ports 51
TCP Ports 51
UDP Ports 53
Naming your PGP Universal Server 55
Considering a Name for Your PGP Universal Server 55
Methods for Naming a PGP Universal Server 56
Installing the PGP Universal Server 57
About Installation 57
System Requirements 58
Installation Materials 58
Installation Options 58
Standard Installation Procedure 59
PGP Installation 60
Setting Up the PGP Universal Server 61
About the Setup Assistant 61
Preparing for Setup after pgp Install 62
Hardware 62
System Information 62
Connect to the PGP Universal Server 63
ii
PGP Universal Server Contents
Initial Configuration with Setup Assistant 63
Primary or Secondary Configuration 72
Restoring From a Server Backup 82
Migrating the Keys from a PGP Keyserver 83
Understanding the Administrative Interface 85
System Requirements 85
Logging In 85
Managing Alerts 88
Logging In For the First Time 89
Administrative Interface Map 90
Icons 91
Licensing Your Software 97
Overview 97
Manual and Automatic Licensing 97
Licensing a PGP Universal Server 98
Licensing the Mail Proxy Feature 98
Operating in Learn Mode 99
Purpose of Learn Mode 99
Checking the Logs 100
Managing Learn Mode 101
Managed Domains 103
About Managed Domains 103
Adding Managed Domains 104
Deleting Managed Domains 105
Managing Organization Keys
107
About Organization Keys 107
Organization Key 107
Inspecting the Organization Key 108
Regenerating the Organization Key 110
Importing an Organization Key 111
Organization Certificate 113
Inspecting the Organization Certificate 113
Exporting the Organization Certificate 114
Deleting the Organization Certificate 115
Generating the Organization Certificate 116
Importing the Organization Certificate 118
iii
PGP Universal Server Contents
Additional Decryption Key (ADK) 119
Importing the ADK 120
Inspecting the ADK 121
Deleting the ADK 122
Verified Directory Key 123
Importing the Verified Directory Key 123
Inspecting the Verified Directory Key 124
Deleting the Verified Directory Key 125
Managing Trusted Keys and Certificates 127
Overview 128
Trusted Keys 130
Trusted Certificates 130
Adding a Trusted Key or Certificate 130
Inspecting and Changing Trusted Key Properties 132
Deleting Trusted Keys and Certificates 133
Searching for Trusted Keys and Certificates 133
Recovering Encrypted Data in an Enterprise Environment 135
Using Key Reconstruction 136
Recovering Encryption Key Material without Key Reconstruction 136
Encryption Key Recovery of CKM Keys 136
Encryption Key Recovery of GKM Keys 137
Encryption Key Recovery of SCKM Keys 137
Encryption Key Recovery of SKM Keys 138
Using an Additional Decryption Key for Data Recovery 138
Setting Mail Policy 141
Overview 142
How Policy Chains Work 143
Mail Policy and Dictionaries 144
Mail Policy and Key Searches 145
Mail Policy and Cached Keys 145
Migrating Settings from Version 2.0.x 145
Understanding the Pre-Installed Policy Chains 146
Mail Policy Outside the Mailflow 147
Building Valid Chains and Rules 148
Using Valid Processing Order 148
Creating Valid Groups 149
Creating a Valid Rule 150
Using the Rule Interface 151
The Conditions Card 152
The Actions Card 154
Managing Policy Chains 154
Mail Policy Best Practices 155
iv
PGP Universal Server Contents
Restoring Mail Policy to Default Settings 155
Editing Policy Chain Settings 155
Adding Policy Chains 156
Deleting Policy Chains 158
Exporting Policy Chains 159
Printing Policy Chains 159
Managing Rules 159
Adding Rules to Policy Chains 159
Deleting Rules from Policy Chains 160
Enabling and Disabling Rules 160
Changing the Processing Order of the Rules 161
Adding Key Searches 161
Choosing Condition Statements, Conditions, and Actions 162
Condition Statements 162
Conditions 162
Actions 170
Working with Common Access Cards 182
Applying Key Not Found Settings to External Users 185
Overview 185
Bounce the Message 186
PDF Messenger 186
Certified Delivery with PDF Messenger 187
Send Unencrypted 187
Smart Trailer 188
PGP Universal Web Messenger 191
Changing Policy Settings 193
Changing User Delivery Method Preference 193
Using Dictionaries with Policy 195
Overview 195
Default Dictionaries 197
Editing Default Dictionaries 198
User-Defined Dictionaries 201
Adding a User-Defined Dictionary 201
Editing a User-Defined Dictionary 203
Deleting a Dictionary 204
Exporting a Dictionary 205
Searching the Dictionaries 205
Keyservers, SMTP Servers, and Mail Policy
207
Overview 207
Keyservers 208
Adding or Editing a Keyserver 209
Deleting a Keyserver 211
v
PGP Universal Server Contents
SMTP Servers 212
Adding or Editing an SMTP Server 212
Deleting an SMTP Server 214
Managing Keys in the Key Cache
215
Overview 215
Changing Cached Key Timeout 216
Purging Keys from the Cache 217
Trusting Cached Keys 217
Viewing Cached Keys 217
Searching the Key Cache 218
Configuring Mail Proxies 219
Overview 219
PGP Universal Server and Mail Proxies 220
Mail Proxies in an Internal Placement 220
Mail Proxies in a Gateway Placement 222
Changes in Proxy Settings from PGP Universal Server 2.0 to 2.5 and later 223
Mail Proxies Card 224
Creating New or Editing Existing Proxies 224
Creating or Editing a POP/IMAP Proxy 225
Creating or Editing an Outbound SMTP Proxy 227
Creating or Editing an Inbound SMTP Proxy 229
Creating or Editing a Unified SMTP Proxy 231
Email in the Mail Queue 235
Overview 235
Deleting Messages from the Mail Queue 236
Specifying Mail Routes
237
Overview 237
Managing Mail Routes 238
Adding a Mail Route 238
Editing a Mail Route 239
Deleting a Mail Route 239
Customizing System Message Templates 241
Overview 241
Templates and Message Size 242
PDF Messenger Templates 242
Templates for New PGP Universal Web Messenger Users 243
vi
PGP Universal Server Contents
Editing a Message Template 243
Setting Internal User Policy
245
Overview 246
Making Sure Users Create Strong Passphrases 248
Understanding Entropy 248
Managing Internal User Policies 249
Adding a New Internal User Policy 249
Editing Internal User Policies 250
Editing the Excluded Users Policy 257
Deleting Internal User Policies 259
Downloading Client Software 259
Directory Synchronization 262
Choosing a Key Mode For Key Management 262
Adding PGP Desktop Solutions to Existing PGP Universal Gateway Email Environments266
Changing Key Modes 266
X.509 Certificate Management in Lotus Notes Environments 267
Trusting Certificates Created by PGP Universal Server 268
Setting the Lotus Notes Key Settings in PGP Universal Server 270
Technical Deployment Information 271
Using the Windows Preinstallation Environment 271
Using Directory Synchronization to Manage Users 273
Overview 273
Enabling Directory Synchronization 275
Testing the LDAP Connection 278
Excluding Users 278
Including Only Some Users 279
Matching Attributes 280
Base DN and Bind DN 282
Understanding User Enrollment Methods 284
Before Creating a Client Installer 284
Email Enrollment 285
Directory Enrollment 287
Serving PGP Admin 8 Preferences 289
Configuring PGP Desktop Installations 291
Establishing PGP Desktop Settings for Your PGP Desktop Clients 291
PGP Desktop Licensing 292
Enrolling Users through Silent Enrollment 293
Silent Enrollment with Windows 293
Silent Enrollment with Mac OS X 294
Configuring PGP Desktop Settings 294
General Tab 298
Licensing Tab 302
vii
PGP Universal Server Contents
Messaging & Keys Tab 303
File & Disk Tab 305
NetShare Tab 308
WDE Tab 314
PGP Desktop Installer Policies 319
Creating PGP Desktop Installers 320
Creating an Installer with No Policy Settings 320
Creating an Installer with Auto-Detect Policy 320
Creating an Installer with Preset Policy 322
Controlling PGP Desktop Components 324
PGP Whole Disk Encryption Administration 325
How Does Single Sign-On Work? 325
Enabling Single Sign-On 326
PGP Whole Disk Encryption on Mac OS X with FileVault 328
Managing Clients Remotely Using a PGP WDE Administrator Active Directory Group 328
Managing Clients Locally Using the PGP WDE Administrator Key 329
Setting External User Policy 331
Overview 332
Managing External User Policies 333
Regrouping External Users 333
Adding a New External User Policy 333
Editing External User Policies 334
Deleting External User Policies 341
Configuring PGP Universal Web Messenger 343
Overview 343
High Availability Mode 344
External Authentication 345
Customizing PGP Universal Web Messenger 347
Adding a New Template 347
Troubleshooting Customization 352
Changing the Active Template 356
Deleting a Template 356
Editing a Template 356
Downloading Template Files 357
Restoring to Factory Defaults 357
Configuring the PGP Universal Web Messenger Service 358
Starting and Stopping PGP Universal Web Messenger 358
Setting High Availability Mode 360
Selecting the PGP Universal Web Messenger Network Interface 360
Setting Up External Authentication 363
Creating Settings for PGP Universal Web Messenger User Accounts 364
viii
PGP Universal Server Contents
Configuring the PGP Verified Directory 367
Overview 367
Enabling the PGP Verified Directory 368
Configuring the PGP Verified Directory 369
Managing Internal User Accounts 373
Overview 373
Certificate Revocation Lists 374
Adding Internal Users Manually 375
Deleting Internal Users 377
Approving Pending Keys 377
Searching for Internal Users 378
Exporting PGP Whole Disk Login Failure Data 379
Internal User Settings 379
Changing Internal User Settings 380
Exporting an Internal User’s X.509 Certificate 381
Revoking the PGP Key of an Internal User 381
Revoking the X.509 Certificate of an Internal User 382
Exporting the PGP Key of an Internal User 382
Deleting the PGP Key of an Internal User 383
Deleting a PGP Desktop Key Reconstruction Block 384
Using Whole Disk Recovery Tokens 384
Deleting Whole Disk Recovery Tokens 385
Viewing PGP Whole Disk Encryption Status 386
Viewing Internal User Log Entries 387
Key Reconstruction Blocks 388
Managing External User Accounts 389
Overview 389
Importing External Users 390
Deleting External Users 391
Searching for External Users 391
Exporting Delivery Receipts 392
External User Settings 393
Changing External User Settings 394
Viewing External User Log Entries 395
Exporting an External User’s X.509 Certificate 395
Exporting the PGP Key of an External User 396
Deleting the PGP Key of an External User 396
Changing the Passphrase of an External User 397
Unlocking PGP Universal Web Messenger Accounts 397
ix
PGP Universal Server Contents
Managing PGP Verified Directory User Accounts 399
Overview 399
Importing Verified Directory Users 400
PGP Verified Directory User Settings 402
Changing PGP Verified Directory User Settings 403
Approving Pending Keys 403
Deleting the PGP Key of a PGP Verified Directory User 404
Viewing PGP Verified Directory User Log Entries 404
Deleting PGP Verified Directory Users 404
Exporting PGP Verified Directory Users 405
Searching for PGP Verified Directory Users 405
Managing Administrator Accounts 407
Overview 407
Creating a New Administrator 408
Importing SSH v2 Keys 410
Deleting Administrators 410
Inspecting and Changing the Settings of an Administrator 411
Daily Status Email 411
PGP Universal Satellite 413
Overview 413
Technical Information 414
Distributing the PGP Universal Satellite Software 415
Configuration 416
Deployment Mode 416
Key Mode 416
Satellite Configurations 417
Switching Key Modes 421
Binding 421
Pre-Binding 422
Manual Binding 423
Policy and Key or Certificate Retrieval 424
Retrieving Lost Policies 425
Retrieving Lost Keys or Certificates 427
x
PGP Universal Server Contents
PGP Universal Satellite for Mac OS X 429
Overview 429
System Requirements 430
Obtaining the Installer 430
Installation 430
Updates 431
Files 431
User Interface 432
About PGP Universal Server 433
Help 434
Show Log 434
Clear Log 435
Policies 435
Preferences 442
Purge Caches 443
Hide and Quit PGP Universal Satellite 443
PGP Universal Satellite for Windows 447
Overview 447
System Requirements 448
Obtaining the Installer 448
Installation 449
Updates 451
Files 452
MAPI Support 452
External MAPI Configuration 453
Internal MAPI Configuration 454
Using MAPI 455
Lotus Notes Support 455
External Lotus Notes Configuration 455
Internal Lotus Notes Configuration 457
Using Lotus Notes 458
Notes IDs 458
User Interface 458
The Policy Tab 459
The Log Tab 461
The Satellite Tray Icon 463
xi
PGP Universal Server Contents
Configuring the Integrated Keyserver 467
Overview 467
Configuring the Keyserver Service 467
Managing the Certificate Revocation List Service 473
Overview 473
Enabling and Disabling the CRL Service 474
Editing CRL Service Settings 474
System Graphs
477
Overview 477
CPU Usage 477
Message Activity 478
Whole Disk Encryption 479
Recipient Statistics 481
Recipient Domain Statistics 482
System Logs 485
Overview 485
Filtering the Log View 486
Searching the Log Files 487
Exporting a Log File 487
Enabling External Logging 488
Shutting Down and Restarting Services and Power 491
Overview 492
PGP Universal Server 493
Setting the Time 493
Updating Software 494
Licensing a PGP Universal Server 494
Downloading the Release Notes 495
xii
PGP Universal Server Contents
Shutting Down and Restarting the PGP Universal Server Software Services 495
Shutting Down and Restarting the PGP Universal Server Hardware 496
Configuring SNMP Monitoring 497
Overview 497
Downloading the Custom MIB File 498
Configuring the SNMP Service 499
Setting Network Interfaces 503
Understanding the Network Settings 504
Connecting to a Proxy Server 505
Changing Interface Settings 507
Adding Interface Settings 507
Deleting Interface Settings 507
Editing Global Network Settings 508
Assigning a Certificate 508
Working with Certificates 508
Importing an Existing Certificate 509
Generating a Certificate Request 512
Adding a Pending Certificate 513
Inspecting a Certificate 514
Exporting a Certificate 515
Deleting a Certificate 516
Clustering your PGP Universal Servers 517
Overview 517
Setting Up the Clustering Utility 518
Clustering and PGP Universal Web Messenger 519
Cluster Status 519
Creating Clusters 521
Deleting Clusters 523
Changing Network Settings in Clusters 523
Managing Secondary Settings in Clusters 524
Protecting PGP Universal Server with Ignition Keys 525
Overview 525
Ignition Keys and Clustering 527
xiii
PGP Universal Server Contents
Preparing Hardware Tokens to be Ignition Keys 527
Configuring a Hardware Token Ignition Key 528
Configuring a Soft-Ignition Passphrase Ignition Key 529
Deleting Ignition Keys 529
Backing Up and Restoring System and User Data 531
Overview 531
Creating Backups 532
Scheduling Backups 532
Performing On-Demand Backups 533
Configuring the Backup Location 533
Restoring From a Backup 535
Restoring On-Demand 535
Restoring Configuration 536
Restoring from a Different Version 540
Updating PGP Universal Server Software 543
Overview 543
Inspecting Update Packages 544
Establishing Software Update Settings 544
Checking for New Updates 545
Uploading Update Packages 545
Manually Installing an Update 545
Index 547
xiv
1
Introduction
This Administrator’s Guide describes both the PGP Universal Server
â„¢
and PGP
Universal Satellite. It tells you how to get them up and running on your network,
how to configure them, and how to maintain them. This section provides a high-
level overview of PGP Universal Server.
In This Chapter
What is PGP Universal Server? ................................................................15
PGP Universal Server Product Family ......................................................16
Who Should Read This Guide ..................................................................16
Common Criteria Environments...............................................................17
Improvements in This Version of PGP Universal Server..........................17
Using the PGP Universal Server with the Command Line.......................17
Symbols....................................................................................................18
Getting Assistance ...................................................................................18
What is PGP Universal Server?
PGP Universal Server provides multiple encryption solutions managed from a
single console.
PGP Universal Server with PGP Universal Gateway Email gives you secure
messaging: it transparently protects your enterprise messages with little or no
user interaction.
The PGP Universal Server also replaces the PGP Keyserver product with a built-
in keyserver, and the PGP Admin product with PGP Desktop configuration and
deployment capabilities.
It automatically creates and maintains a Self-Managing Security Architecture
(SMSA) by monitoring authenticated users and their email traffic. You can also
send protected messages to addresses that are not part of the SMSA. The PGP
Universal Server encrypts, decrypts, signs, and verifies messages automatically,
providing strong security through policies you control.
15
PGP Universal Server Introduction
PGP Universal Satellite, a client-side feature of PGP Universal Server, extends
PGP security for email messages all the way to the computer of the email user,
it allows external users to become part of the SMSA, and it gives end users the
option to create and manage their keys on their own computer (if allowed by
the PGP administrator).
PGP Universal Server Product Family
PGP Universal Server functions as a management console for a variety of
encryption solutions. You can purchase any of the PGP Desktop applications or
bundles and use PGP Universal Server to create and manage client installations.
You can also purchase a license that enables PGP Gateway Email to encrypt
email in the mailstream.
The PGP Universal Server can manage any combination of PGP encryption
applications. PGP encryption applications are:
 PGP Universal Gateway Email provides automatic email encryption in the
gateway, based on centralized mail policy. This product requires
administration by the PGP Universal Server.
 PGP Desktop Email provides encryption at the desktop for mail, files, and
AOL Instant Messenger traffic. This product can be managed by the PGP
Universal Server.
 PGP Whole Disk Encryption provides encryption at the desktop for an
entire disk. This product can be managed by the PGP Universal Server.
 PGP NetShare provides transparent file encryption and sharing among
desktops. This product can be managed by the PGP Universal Server.
Who Should Read This Guide
This Administrator’s Guide is for the person or persons who implement and
maintain your organization’s PGP Universal Server environment. These are the
PGP administrators.
This guide is also intended for anyone else who wants to learn about how PGP
Universal Server works.
16
  • Page 1 1
  • Page 2 2
  • Page 3 3
  • Page 4 4
  • Page 5 5
  • Page 6 6
  • Page 7 7
  • Page 8 8
  • Page 9 9
  • Page 10 10
  • Page 11 11
  • Page 12 12
  • Page 13 13
  • Page 14 14
  • Page 15 15
  • Page 16 16
  • Page 17 17
  • Page 18 18
  • Page 19 19
  • Page 20 20
  • Page 21 21
  • Page 22 22
  • Page 23 23
  • Page 24 24
  • Page 25 25
  • Page 26 26
  • Page 27 27
  • Page 28 28
  • Page 29 29
  • Page 30 30
  • Page 31 31
  • Page 32 32
  • Page 33 33
  • Page 34 34
  • Page 35 35
  • Page 36 36
  • Page 37 37
  • Page 38 38
  • Page 39 39
  • Page 40 40
  • Page 41 41
  • Page 42 42
  • Page 43 43
  • Page 44 44
  • Page 45 45
  • Page 46 46
  • Page 47 47
  • Page 48 48
  • Page 49 49
  • Page 50 50
  • Page 51 51
  • Page 52 52
  • Page 53 53
  • Page 54 54
  • Page 55 55
  • Page 56 56
  • Page 57 57
  • Page 58 58
  • Page 59 59
  • Page 60 60
  • Page 61 61
  • Page 62 62
  • Page 63 63
  • Page 64 64
  • Page 65 65
  • Page 66 66
  • Page 67 67
  • Page 68 68
  • Page 69 69
  • Page 70 70
  • Page 71 71
  • Page 72 72
  • Page 73 73
  • Page 74 74
  • Page 75 75
  • Page 76 76
  • Page 77 77
  • Page 78 78
  • Page 79 79
  • Page 80 80
  • Page 81 81
  • Page 82 82
  • Page 83 83
  • Page 84 84
  • Page 85 85
  • Page 86 86
  • Page 87 87
  • Page 88 88
  • Page 89 89
  • Page 90 90
  • Page 91 91
  • Page 92 92
  • Page 93 93
  • Page 94 94
  • Page 95 95
  • Page 96 96
  • Page 97 97
  • Page 98 98
  • Page 99 99
  • Page 100 100
  • Page 101 101
  • Page 102 102
  • Page 103 103
  • Page 104 104
  • Page 105 105
  • Page 106 106
  • Page 107 107
  • Page 108 108
  • Page 109 109
  • Page 110 110
  • Page 111 111
  • Page 112 112
  • Page 113 113
  • Page 114 114
  • Page 115 115
  • Page 116 116
  • Page 117 117
  • Page 118 118
  • Page 119 119
  • Page 120 120
  • Page 121 121
  • Page 122 122
  • Page 123 123
  • Page 124 124
  • Page 125 125
  • Page 126 126
  • Page 127 127
  • Page 128 128
  • Page 129 129
  • Page 130 130
  • Page 131 131
  • Page 132 132
  • Page 133 133
  • Page 134 134
  • Page 135 135
  • Page 136 136
  • Page 137 137
  • Page 138 138
  • Page 139 139
  • Page 140 140
  • Page 141 141
  • Page 142 142
  • Page 143 143
  • Page 144 144
  • Page 145 145
  • Page 146 146
  • Page 147 147
  • Page 148 148
  • Page 149 149
  • Page 150 150
  • Page 151 151
  • Page 152 152
  • Page 153 153
  • Page 154 154
  • Page 155 155
  • Page 156 156
  • Page 157 157
  • Page 158 158
  • Page 159 159
  • Page 160 160
  • Page 161 161
  • Page 162 162
  • Page 163 163
  • Page 164 164
  • Page 165 165
  • Page 166 166
  • Page 167 167
  • Page 168 168
  • Page 169 169
  • Page 170 170
  • Page 171 171
  • Page 172 172
  • Page 173 173
  • Page 174 174
  • Page 175 175
  • Page 176 176
  • Page 177 177
  • Page 178 178
  • Page 179 179
  • Page 180 180
  • Page 181 181
  • Page 182 182
  • Page 183 183
  • Page 184 184
  • Page 185 185
  • Page 186 186
  • Page 187 187
  • Page 188 188
  • Page 189 189
  • Page 190 190
  • Page 191 191
  • Page 192 192
  • Page 193 193
  • Page 194 194
  • Page 195 195
  • Page 196 196
  • Page 197 197
  • Page 198 198
  • Page 199 199
  • Page 200 200
  • Page 201 201
  • Page 202 202
  • Page 203 203
  • Page 204 204
  • Page 205 205
  • Page 206 206
  • Page 207 207
  • Page 208 208
  • Page 209 209
  • Page 210 210
  • Page 211 211
  • Page 212 212
  • Page 213 213
  • Page 214 214
  • Page 215 215
  • Page 216 216
  • Page 217 217
  • Page 218 218
  • Page 219 219
  • Page 220 220
  • Page 221 221
  • Page 222 222
  • Page 223 223
  • Page 224 224
  • Page 225 225
  • Page 226 226
  • Page 227 227
  • Page 228 228
  • Page 229 229
  • Page 230 230
  • Page 231 231
  • Page 232 232
  • Page 233 233
  • Page 234 234
  • Page 235 235
  • Page 236 236
  • Page 237 237
  • Page 238 238
  • Page 239 239
  • Page 240 240
  • Page 241 241
  • Page 242 242
  • Page 243 243
  • Page 244 244
  • Page 245 245
  • Page 246 246
  • Page 247 247
  • Page 248 248
  • Page 249 249
  • Page 250 250
  • Page 251 251
  • Page 252 252
  • Page 253 253
  • Page 254 254
  • Page 255 255
  • Page 256 256
  • Page 257 257
  • Page 258 258
  • Page 259 259
  • Page 260 260
  • Page 261 261
  • Page 262 262
  • Page 263 263
  • Page 264 264
  • Page 265 265
  • Page 266 266
  • Page 267 267
  • Page 268 268
  • Page 269 269
  • Page 270 270
  • Page 271 271
  • Page 272 272
  • Page 273 273
  • Page 274 274
  • Page 275 275
  • Page 276 276
  • Page 277 277
  • Page 278 278
  • Page 279 279
  • Page 280 280
  • Page 281 281
  • Page 282 282
  • Page 283 283
  • Page 284 284
  • Page 285 285
  • Page 286 286
  • Page 287 287
  • Page 288 288
  • Page 289 289
  • Page 290 290
  • Page 291 291
  • Page 292 292
  • Page 293 293
  • Page 294 294
  • Page 295 295
  • Page 296 296
  • Page 297 297
  • Page 298 298
  • Page 299 299
  • Page 300 300
  • Page 301 301
  • Page 302 302
  • Page 303 303
  • Page 304 304
  • Page 305 305
  • Page 306 306
  • Page 307 307
  • Page 308 308
  • Page 309 309
  • Page 310 310
  • Page 311 311
  • Page 312 312
  • Page 313 313
  • Page 314 314
  • Page 315 315
  • Page 316 316
  • Page 317 317
  • Page 318 318
  • Page 319 319
  • Page 320 320
  • Page 321 321
  • Page 322 322
  • Page 323 323
  • Page 324 324
  • Page 325 325
  • Page 326 326
  • Page 327 327
  • Page 328 328
  • Page 329 329
  • Page 330 330
  • Page 331 331
  • Page 332 332
  • Page 333 333
  • Page 334 334
  • Page 335 335
  • Page 336 336
  • Page 337 337
  • Page 338 338
  • Page 339 339
  • Page 340 340
  • Page 341 341
  • Page 342 342
  • Page 343 343
  • Page 344 344
  • Page 345 345
  • Page 346 346
  • Page 347 347
  • Page 348 348
  • Page 349 349
  • Page 350 350
  • Page 351 351
  • Page 352 352
  • Page 353 353
  • Page 354 354
  • Page 355 355
  • Page 356 356
  • Page 357 357
  • Page 358 358
  • Page 359 359
  • Page 360 360
  • Page 361 361
  • Page 362 362
  • Page 363 363
  • Page 364 364
  • Page 365 365
  • Page 366 366
  • Page 367 367
  • Page 368 368
  • Page 369 369
  • Page 370 370
  • Page 371 371
  • Page 372 372
  • Page 373 373
  • Page 374 374
  • Page 375 375
  • Page 376 376
  • Page 377 377
  • Page 378 378
  • Page 379 379
  • Page 380 380
  • Page 381 381
  • Page 382 382
  • Page 383 383
  • Page 384 384
  • Page 385 385
  • Page 386 386
  • Page 387 387
  • Page 388 388
  • Page 389 389
  • Page 390 390
  • Page 391 391
  • Page 392 392
  • Page 393 393
  • Page 394 394
  • Page 395 395
  • Page 396 396
  • Page 397 397
  • Page 398 398
  • Page 399 399
  • Page 400 400
  • Page 401 401
  • Page 402 402
  • Page 403 403
  • Page 404 404
  • Page 405 405
  • Page 406 406
  • Page 407 407
  • Page 408 408
  • Page 409 409
  • Page 410 410
  • Page 411 411
  • Page 412 412
  • Page 413 413
  • Page 414 414
  • Page 415 415
  • Page 416 416
  • Page 417 417
  • Page 418 418
  • Page 419 419
  • Page 420 420
  • Page 421 421
  • Page 422 422
  • Page 423 423
  • Page 424 424
  • Page 425 425
  • Page 426 426
  • Page 427 427
  • Page 428 428
  • Page 429 429
  • Page 430 430
  • Page 431 431
  • Page 432 432
  • Page 433 433
  • Page 434 434
  • Page 435 435
  • Page 436 436
  • Page 437 437
  • Page 438 438
  • Page 439 439
  • Page 440 440
  • Page 441 441
  • Page 442 442
  • Page 443 443
  • Page 444 444
  • Page 445 445
  • Page 446 446
  • Page 447 447
  • Page 448 448
  • Page 449 449
  • Page 450 450
  • Page 451 451
  • Page 452 452
  • Page 453 453
  • Page 454 454
  • Page 455 455
  • Page 456 456
  • Page 457 457
  • Page 458 458
  • Page 459 459
  • Page 460 460
  • Page 461 461
  • Page 462 462
  • Page 463 463
  • Page 464 464
  • Page 465 465
  • Page 466 466
  • Page 467 467
  • Page 468 468
  • Page 469 469
  • Page 470 470
  • Page 471 471
  • Page 472 472
  • Page 473 473
  • Page 474 474
  • Page 475 475
  • Page 476 476
  • Page 477 477
  • Page 478 478
  • Page 479 479
  • Page 480 480
  • Page 481 481
  • Page 482 482
  • Page 483 483
  • Page 484 484
  • Page 485 485
  • Page 486 486
  • Page 487 487
  • Page 488 488
  • Page 489 489
  • Page 490 490
  • Page 491 491
  • Page 492 492
  • Page 493 493
  • Page 494 494
  • Page 495 495
  • Page 496 496
  • Page 497 497
  • Page 498 498
  • Page 499 499
  • Page 500 500
  • Page 501 501
  • Page 502 502
  • Page 503 503
  • Page 504 504
  • Page 505 505
  • Page 506 506
  • Page 507 507
  • Page 508 508
  • Page 509 509
  • Page 510 510
  • Page 511 511
  • Page 512 512
  • Page 513 513
  • Page 514 514
  • Page 515 515
  • Page 516 516
  • Page 517 517
  • Page 518 518
  • Page 519 519
  • Page 520 520
  • Page 521 521
  • Page 522 522
  • Page 523 523
  • Page 524 524
  • Page 525 525
  • Page 526 526
  • Page 527 527
  • Page 528 528
  • Page 529 529
  • Page 530 530
  • Page 531 531
  • Page 532 532
  • Page 533 533
  • Page 534 534
  • Page 535 535
  • Page 536 536
  • Page 537 537
  • Page 538 538
  • Page 539 539
  • Page 540 540
  • Page 541 541
  • Page 542 542
  • Page 543 543
  • Page 544 544
  • Page 545 545
  • Page 546 546
  • Page 547 547
  • Page 548 548
  • Page 549 549
  • Page 550 550
  • Page 551 551
  • Page 552 552
  • Page 553 553
  • Page 554 554
  • Page 555 555
  • Page 556 556
  • Page 557 557
  • Page 558 558
  • Page 559 559
  • Page 560 560

PGP Universal Server 2.1 User guide

Category
Software
Type
User guide

Ask a question and I''ll find the answer in the document

Finding information in a document is now easier with AI