PGP Universal Server 2.1.2 User guide

PGP Universal Server

Administrator's Guide

Version Information

PGP Universal Server Administrator's Guide. PGP Universal Server Version 2.12.0. Released October 2009.

Copyright Information

means, electronic or mechanical, for any purpose, without the express written permission of PGP Corporation.

Trademark Information

PGP, Pretty Good Privacy, and the PGP logo are registered trademarks of PGP Corporation in the US and other countries. IDEA is a trademark of

Ascom Tech AG. Windows and ActiveX are registered trademarks of Microsoft Corporation. AOL is a registered trademark, and AOL Instant

Messenger is a trademark, of America Online, Inc. Red Hat and Red Hat Linux are trademarks or registered trademarks of Red Hat, Inc. Linux is a

registered trademark of Linus Torvalds. Solaris is a trademark or registered trademark of Sun Microsystems, Inc. AIX is a trademark or registered

trademark of International Business Machines Corporation. HP-UX is a trademark or registered trademark of Hewlett-Packard Company. SSH and

Secure Shell are trademarks of SSH Communications Security, Inc. Rendezvous and Mac OS X are trademarks or registered trademarks of Apple

Computer, Inc. All other registered and unregistered trademarks in this document are the sole property of their respective owners.

Licensing and Patent Information

The IDEA cryptographic cipher described in U.S. patent number 5,214,703 is licensed from Ascom Tech AG. The CAST-128 encryption algorithm,

implemented from RFC 2144, is available worldwide on a royalty-free basis for commercial and non-commercial uses. PGP Corporation has secured a

license to the patent rights contained in the patent application Serial Number 10/655,563 by The Regents of the University of California, entitled Block

Cipher Mode of Operation for Constructing a Wide-blocksize block Cipher from a Conventional Block Cipher. Some third-party software included in PGP

Universal Server is licensed under the GNU General Public License (GPL). PGP Universal Server as a whole is not licensed under the GPL. If you would

like a copy of the source code for the GPL software included in PGP Universal Server, contact PGP Support (

https://pgp.custhelp.com). PGP

Corporation may have patents and/or pending patent applications covering subject matter in this software or its documentation; the furnishing of this

software or documentation does not give you any license to these patents.

Acknowledgments

This product includes or may include:

z The Zip and ZLib compression code, created by Mark Adler and Jean-Loup Gailly, is used with permission from the free Info-ZIP implementation,

developed by zlib (

http://www.zlib.net). z Libxml2, the XML C parser and toolkit developed for the Gnome project and distributed and copyrighted

under the MIT License found at

http://jakarta.apache.org/), web

server (

http://www.apache.org/), Jakarta Commons (http://jakarta.apache.org/commons/license.html) and log4j, a Java-based library used to parse

HTML, developed by the Apache Software Foundation. The license is at

www.apache.org/licenses/LICENSE-2.0.txt. z Castor, an open-source, data-

binding framework for moving data from XML to Java programming language objects and from Java to databases, is released by the ExoLab Group

under an Apache 2.0-style license, available at

http://www.castor.org/license.html. z Xalan, an open-source software library from the Apache Software

Foundation that implements the XSLT XML transformation language and the XPath XML query language, is released under the Apache Software

License, version 1.1, available at

http://xml.apache.org/xalan-j/#license1.1. z Apache Axis is an implementation of the SOAP ("Simple Object Access

Protocol") used for communications between various PGP products is provided under the Apache license found at

http://www.apache.org/licenses/LICENSE-2.0.txt. z mx4j, an open-source implementation of the Java Management Extensions (JMX), is released

under an Apache-style license, available at

http://mx4j.sourceforge.net/docs/ch01s06.html. z jpeglib version 6a is based in part on the work of the

Independent JPEG Group. (

http://www.ijg.org/) z libxslt the XSLT C library developed for the GNOME project and used for XML transformations is

distributed under the MIT License

http://www.opensource.org/licenses/mit-license.html. z PCRE version 4.5 Perl regular expression compiler,

http://www.pcre.org/license.txt. z BIND Balanced

Binary Tree Library and Domain Name System (DNS) protocols developed and copyrighted by Internet Systems Consortium, Inc. (

http://www.isc.org)

http://net-snmp.sourceforge.net/about/license.html. z NTP version 4.2

developed by Network Time Protocol and copyrighted to various contributors. z Lightweight Directory Access Protocol developed and copyrighted by

The OpenLDAP Foundation. The license agreement is at

http://www.openldap.org/software/release/license.html. Secure shell OpenSSH version 4.2.1

developed by OpenBSD project is released by the OpenBSD Project under a BSD-style license, available at

http://www.openbsd.org/cgi-

bin/cvsweb/src/usr.bin/ssh/LICENCE?rev=HEAD. z PC/SC Lite is a free implementation of PC/SC, a specification for SmartCard integration is released

under the BSD license. z Postfix, an open source mail transfer agent (MTA), is released under the IBM Public License 1.0, available at

http://www.opensource.org/licenses/ibmpl.php. z PostgreSQL, a free software object-relational database management system, is released under a

BSD-style license, available at

http://www.postgresql.org/about/licence. z PostgreSQL JDBC driver, a free Java program used to connect to a

BSD-style license, available at

http://jdbc.postgresql.org/license.html. z PostgreSQL Regular Expression Library, a free software object-relational

database management system, is released under a BSD-style license, available at

http://www.postgresql.org/about/licence. z 21.vixie-cron is the Vixie

z JacORB, a Java object used to facilitate communication between processes written in Java and the data layer, is open source licensed under the

GNU Library General Public License (LGPL) available at

is an open-source implementation of a CORBA Object Request Broker (ORB), and is used for communication between processes written in C/C++ and

Vanderbilt University. The open source software license is available at

http://www.cs.wustl.edu/~schmidt/ACE-copying.html. z libcURL, a library for

downloading files via common network services, is open source software provided under a MIT/X derivate license available at

under a BSD-style license, available at

libpopt, a library that parses command line options, is released under the terms of the GNU Free Documentation License available at

to communicate with the Intel Corporation AMT chipset on a motherboard, is distributed under the GNU Public License, available at

http://www.cs.fsu.edu/~engelen/soaplicense.html. z Windows Template Library (WTL) is used for developing user interface components and is

distributed under the Common Public License v1.0 found at

http://opensource.org/licenses/cpl1.0.php. z The Perl Kit provides several independent

utilities used to automate a variety of maintenance functions and is provided under the Perl Artistic License, found at

http://www.perl.com/pub/a/language/misc/Artistic.html. z rEFIt - libeg, provides a graphical interface library for EFI, including image rendering, text

rendering, and alpha blending, and is distributed under the license found at

reserved. z Java Radius Client, used to authenticate PGP Universal Web Messenger users via Radius, is distributed under the Lesser General Public

License (LGPL) found at

http://www.gnu.org/licenses/lgpl.html.

Export Information

Export of this software and documentation may be subject to compliance with the rules and regulations promulgated from time to time by the Bureau

of Export Administration, United States Department of Commerce, which restricts the export and re-export of certain products and technical data.

Limitations

The software provided with this documentation is licensed to you for your individual use under the terms of the End User License Agreement provided

with the software. The information in this document is subject to change without notice. PGP Corporation does not warrant that the information meets

your requirements or that the information is free of errors. The information may include technical inaccuracies or typographical errors. Changes may be

made to the information and incorporated in new editions of this document, if and when made available by PGP Corporation.

4

15

Contents

Introduction

What is PGP Universal Server? 15

PGP Universal Server Product Family 16

Who Should Read This Guide 16

Common Criteria Environments 17

Improvements in This Version of PGP Universal Server 17

Using the PGP Universal Server with the Command Line 17

Symbols 18

Getting Assistance 18

Getting product information 18

Contact information 19

The Big Picture 21

Important Terms 21

PGP Products 21

PGP Universal Server Concepts 21

PGP Universal Server Features 22

PGP Universal Server User Types 24

Installation Overview 25

Adding the PGP Universal Server to Your Network 31

Server Placement 31

Gateway Placement 32

Internal Placement 33

Using a Mail Relay 34

Microsoft Exchange Server 34

Lotus Domino Server 34

Configuration Examples 35

Internal Placement Configuration 36

Gateway Placement Configuration 37

Non-mailstream Placement Configuration 38

Cluster Configuration 39

Clustered Proxy and Keyserver Configuration 40

Gateway Cluster with Load Balancer 42

Gateway and Internal Placement Cluster 43

Encircled Configuration 45

Large Enterprise Configuration 46

Spam Filters and PGP Universal Server 47

Exchange with PGP Client Software 48

Lotus Domino Server with PGP Client Software 49

Unsupported Configurations 49

i

PGP Universal Server Contents

Open Ports 51

TCP Ports 51

UDP Ports 53

Naming your PGP Universal Server 55

Considering a Name for Your PGP Universal Server 55

Methods for Naming a PGP Universal Server 56

Installing the PGP Universal Server 57

About Installation 57

System Requirements 58

Installation Materials 58

Installation Options 58

Standard Installation Procedure 59

PGP Installation 60

Setting Up the PGP Universal Server 61

About the Setup Assistant 61

Preparing for Setup after pgp Install 62

Hardware 62

System Information 62

Connect to the PGP Universal Server 63

ii

PGP Universal Server Contents

Initial Configuration with Setup Assistant 63

Primary or Secondary Configuration 72

Restoring From a Server Backup 82

Migrating the Keys from a PGP Keyserver 83

Understanding the Administrative Interface 85

System Requirements 85

Logging In 85

Managing Alerts 88

Logging In For the First Time 89

Administrative Interface Map 90

Icons 91

Licensing Your Software 97

Overview 97

Manual and Automatic Licensing 97

Licensing a PGP Universal Server 98

Licensing the Mail Proxy Feature 98

Operating in Learn Mode 99

Purpose of Learn Mode 99

Checking the Logs 100

Managing Learn Mode 101

Managed Domains 103

About Managed Domains 103

Adding Managed Domains 104

Deleting Managed Domains 105

Managing Organization Keys

107

About Organization Keys 107

Organization Key 107

Inspecting the Organization Key 108

Regenerating the Organization Key 110

Importing an Organization Key 111

Organization Certificate 113

Inspecting the Organization Certificate 113

Exporting the Organization Certificate 114

Deleting the Organization Certificate 115

Generating the Organization Certificate 116

Importing the Organization Certificate 118

iii

PGP Universal Server Contents

Additional Decryption Key (ADK) 119

Importing the ADK 120

Inspecting the ADK 121

Deleting the ADK 122

Verified Directory Key 123

Importing the Verified Directory Key 123

Inspecting the Verified Directory Key 124

Deleting the Verified Directory Key 125

Managing Trusted Keys and Certificates 127

Overview 128

Trusted Keys 130

Trusted Certificates 130

Adding a Trusted Key or Certificate 130

Inspecting and Changing Trusted Key Properties 132

Deleting Trusted Keys and Certificates 133

Searching for Trusted Keys and Certificates 133

Recovering Encrypted Data in an Enterprise Environment 135

Using Key Reconstruction 136

Recovering Encryption Key Material without Key Reconstruction 136

Encryption Key Recovery of CKM Keys 136

Encryption Key Recovery of GKM Keys 137

Encryption Key Recovery of SCKM Keys 137

Encryption Key Recovery of SKM Keys 138

Using an Additional Decryption Key for Data Recovery 138

Setting Mail Policy 141

Overview 142

How Policy Chains Work 143

Mail Policy and Dictionaries 144

Mail Policy and Key Searches 145

Mail Policy and Cached Keys 145

Migrating Settings from Version 2.0.x 145

Understanding the Pre-Installed Policy Chains 146

Mail Policy Outside the Mailflow 147

Building Valid Chains and Rules 148

Using Valid Processing Order 148

Creating Valid Groups 149

Creating a Valid Rule 150

Using the Rule Interface 151

The Conditions Card 152

The Actions Card 154

Managing Policy Chains 154

Mail Policy Best Practices 155

iv

PGP Universal Server Contents

Restoring Mail Policy to Default Settings 155

Editing Policy Chain Settings 155

Adding Policy Chains 156

Deleting Policy Chains 158

Exporting Policy Chains 159

Printing Policy Chains 159

Managing Rules 159

Adding Rules to Policy Chains 159

Deleting Rules from Policy Chains 160

Enabling and Disabling Rules 160

Changing the Processing Order of the Rules 161

Adding Key Searches 161

Choosing Condition Statements, Conditions, and Actions 162

Condition Statements 162

Conditions 162

Actions 170

Working with Common Access Cards 182

Applying Key Not Found Settings to External Users 185

Overview 185

Bounce the Message 186

PDF Messenger 186

Certified Delivery with PDF Messenger 187

Send Unencrypted 187

Smart Trailer 188

PGP Universal Web Messenger 191

Changing Policy Settings 193

Changing User Delivery Method Preference 193

Using Dictionaries with Policy 195

Overview 195

Default Dictionaries 197

Editing Default Dictionaries 198

User-Defined Dictionaries 201

Adding a User-Defined Dictionary 201

Editing a User-Defined Dictionary 203

Deleting a Dictionary 204

Exporting a Dictionary 205

Searching the Dictionaries 205

Keyservers, SMTP Servers, and Mail Policy

207

Overview 207

Keyservers 208

Adding or Editing a Keyserver 209

Deleting a Keyserver 211

v

PGP Universal Server Contents

SMTP Servers 212

Adding or Editing an SMTP Server 212

Deleting an SMTP Server 214

Managing Keys in the Key Cache

215

Overview 215

Changing Cached Key Timeout 216

Purging Keys from the Cache 217

Trusting Cached Keys 217

Viewing Cached Keys 217

Searching the Key Cache 218

Configuring Mail Proxies 219

Overview 219

PGP Universal Server and Mail Proxies 220

Mail Proxies in an Internal Placement 220

Mail Proxies in a Gateway Placement 222

Changes in Proxy Settings from PGP Universal Server 2.0 to 2.5 and later 223

Mail Proxies Card 224

Creating New or Editing Existing Proxies 224

Creating or Editing a POP/IMAP Proxy 225

Creating or Editing an Outbound SMTP Proxy 227

Creating or Editing an Inbound SMTP Proxy 229

Creating or Editing a Unified SMTP Proxy 231

Email in the Mail Queue 235

Overview 235

Deleting Messages from the Mail Queue 236

Specifying Mail Routes

237

Overview 237

Managing Mail Routes 238

Adding a Mail Route 238

Editing a Mail Route 239

Deleting a Mail Route 239

Customizing System Message Templates 241

Overview 241

Templates and Message Size 242

PDF Messenger Templates 242

Templates for New PGP Universal Web Messenger Users 243

vi

PGP Universal Server Contents

Editing a Message Template 243

Setting Internal User Policy

245

Overview 246

Making Sure Users Create Strong Passphrases 248

Understanding Entropy 248

Managing Internal User Policies 249

Adding a New Internal User Policy 249

Editing Internal User Policies 250

Editing the Excluded Users Policy 257

Deleting Internal User Policies 259

Downloading Client Software 259

Directory Synchronization 262

Choosing a Key Mode For Key Management 262

Adding PGP Desktop Solutions to Existing PGP Universal Gateway Email Environments266

Changing Key Modes 266

X.509 Certificate Management in Lotus Notes Environments 267

Trusting Certificates Created by PGP Universal Server 268

Setting the Lotus Notes Key Settings in PGP Universal Server 270

Technical Deployment Information 271

Using the Windows Preinstallation Environment 271

Using Directory Synchronization to Manage Users 273

Overview 273

Enabling Directory Synchronization 275

Testing the LDAP Connection 278

Excluding Users 278

Including Only Some Users 279

Matching Attributes 280

Base DN and Bind DN 282

Understanding User Enrollment Methods 284

Before Creating a Client Installer 284

Email Enrollment 285

Directory Enrollment 287

Serving PGP Admin 8 Preferences 289

Configuring PGP Desktop Installations 291

Establishing PGP Desktop Settings for Your PGP Desktop Clients 291

PGP Desktop Licensing 292

Enrolling Users through Silent Enrollment 293

Silent Enrollment with Windows 293

Silent Enrollment with Mac OS X 294

Configuring PGP Desktop Settings 294

General Tab 298

Licensing Tab 302

vii

PGP Universal Server Contents

Messaging & Keys Tab 303

File & Disk Tab 305

NetShare Tab 308

WDE Tab 314

PGP Desktop Installer Policies 319

Creating PGP Desktop Installers 320

Creating an Installer with No Policy Settings 320

Creating an Installer with Auto-Detect Policy 320

Creating an Installer with Preset Policy 322

Controlling PGP Desktop Components 324

PGP Whole Disk Encryption Administration 325

How Does Single Sign-On Work? 325

Enabling Single Sign-On 326

PGP Whole Disk Encryption on Mac OS X with FileVault 328

Managing Clients Remotely Using a PGP WDE Administrator Active Directory Group 328

Managing Clients Locally Using the PGP WDE Administrator Key 329

Setting External User Policy 331

Overview 332

Managing External User Policies 333

Regrouping External Users 333

Adding a New External User Policy 333

Editing External User Policies 334

Deleting External User Policies 341

Configuring PGP Universal Web Messenger 343

Overview 343

High Availability Mode 344

External Authentication 345

Customizing PGP Universal Web Messenger 347

Adding a New Template 347

Troubleshooting Customization 352

Changing the Active Template 356

Deleting a Template 356

Editing a Template 356

Downloading Template Files 357

Restoring to Factory Defaults 357

Configuring the PGP Universal Web Messenger Service 358

Starting and Stopping PGP Universal Web Messenger 358

Setting High Availability Mode 360

Selecting the PGP Universal Web Messenger Network Interface 360

Setting Up External Authentication 363

Creating Settings for PGP Universal Web Messenger User Accounts 364

viii

PGP Universal Server Contents

Configuring the PGP Verified Directory 367

Overview 367

Enabling the PGP Verified Directory 368

Configuring the PGP Verified Directory 369

Managing Internal User Accounts 373

Overview 373

Certificate Revocation Lists 374

Adding Internal Users Manually 375

Deleting Internal Users 377

Approving Pending Keys 377

Searching for Internal Users 378

Exporting PGP Whole Disk Login Failure Data 379

Internal User Settings 379

Changing Internal User Settings 380

Exporting an Internal User’s X.509 Certificate 381

Revoking the PGP Key of an Internal User 381

Revoking the X.509 Certificate of an Internal User 382

Exporting the PGP Key of an Internal User 382

Deleting the PGP Key of an Internal User 383

Deleting a PGP Desktop Key Reconstruction Block 384

Using Whole Disk Recovery Tokens 384

Deleting Whole Disk Recovery Tokens 385

Viewing PGP Whole Disk Encryption Status 386

Viewing Internal User Log Entries 387

Key Reconstruction Blocks 388

Managing External User Accounts 389

Overview 389

Importing External Users 390

Deleting External Users 391

Searching for External Users 391

Exporting Delivery Receipts 392

External User Settings 393

Changing External User Settings 394

Viewing External User Log Entries 395

Exporting an External User’s X.509 Certificate 395

Exporting the PGP Key of an External User 396

Deleting the PGP Key of an External User 396

Changing the Passphrase of an External User 397

Unlocking PGP Universal Web Messenger Accounts 397

ix

PGP Universal Server Contents

Managing PGP Verified Directory User Accounts 399

Overview 399

Importing Verified Directory Users 400

PGP Verified Directory User Settings 402

Changing PGP Verified Directory User Settings 403

Approving Pending Keys 403

Deleting the PGP Key of a PGP Verified Directory User 404

Viewing PGP Verified Directory User Log Entries 404

Deleting PGP Verified Directory Users 404

Exporting PGP Verified Directory Users 405

Searching for PGP Verified Directory Users 405

Managing Administrator Accounts 407

Overview 407

Creating a New Administrator 408

Importing SSH v2 Keys 410

Deleting Administrators 410

Inspecting and Changing the Settings of an Administrator 411

Daily Status Email 411

PGP Universal Satellite 413

Overview 413

Technical Information 414

Distributing the PGP Universal Satellite Software 415

Configuration 416

Deployment Mode 416

Key Mode 416

Satellite Configurations 417

Switching Key Modes 421

Binding 421

Pre-Binding 422

Manual Binding 423

Policy and Key or Certificate Retrieval 424

Retrieving Lost Policies 425

Retrieving Lost Keys or Certificates 427

x

PGP Universal Server Contents

PGP Universal Satellite for Mac OS X 429

Overview 429

System Requirements 430

Obtaining the Installer 430

Installation 430

Updates 431

Files 431

User Interface 432

About PGP Universal Server 433

Help 434

Show Log 434

Clear Log 435

Policies 435

Preferences 442

Purge Caches 443

Hide and Quit PGP Universal Satellite 443

PGP Universal Satellite for Windows 447

Overview 447

System Requirements 448

Obtaining the Installer 448

Installation 449

Updates 451

Files 452

MAPI Support 452

External MAPI Configuration 453

Internal MAPI Configuration 454

Using MAPI 455

Lotus Notes Support 455

External Lotus Notes Configuration 455

Internal Lotus Notes Configuration 457

Using Lotus Notes 458

Notes IDs 458

User Interface 458

The Policy Tab 459

The Log Tab 461

The Satellite Tray Icon 463

xi

PGP Universal Server Contents

Configuring the Integrated Keyserver 467

Overview 467

Configuring the Keyserver Service 467

Managing the Certificate Revocation List Service 473

Overview 473

Enabling and Disabling the CRL Service 474

Editing CRL Service Settings 474

System Graphs

477

Overview 477

CPU Usage 477

Message Activity 478

Whole Disk Encryption 479

Recipient Statistics 481

Recipient Domain Statistics 482

System Logs 485

Overview 485

Filtering the Log View 486

Searching the Log Files 487

Exporting a Log File 487

Enabling External Logging 488

Shutting Down and Restarting Services and Power 491

Overview 492

PGP Universal Server 493

Setting the Time 493

Updating Software 494

Licensing a PGP Universal Server 494

Downloading the Release Notes 495

xii

PGP Universal Server Contents

Shutting Down and Restarting the PGP Universal Server Software Services 495

Shutting Down and Restarting the PGP Universal Server Hardware 496

Configuring SNMP Monitoring 497

Overview 497

Downloading the Custom MIB File 498

Configuring the SNMP Service 499

Setting Network Interfaces 503

Understanding the Network Settings 504

Connecting to a Proxy Server 505

Changing Interface Settings 507

Adding Interface Settings 507

Deleting Interface Settings 507

Editing Global Network Settings 508

Assigning a Certificate 508

Working with Certificates 508

Importing an Existing Certificate 509

Generating a Certificate Request 512

Adding a Pending Certificate 513

Inspecting a Certificate 514

Exporting a Certificate 515

Deleting a Certificate 516

Clustering your PGP Universal Servers 517

Overview 517

Setting Up the Clustering Utility 518

Clustering and PGP Universal Web Messenger 519

Cluster Status 519

Creating Clusters 521

Deleting Clusters 523

Changing Network Settings in Clusters 523

Managing Secondary Settings in Clusters 524

Protecting PGP Universal Server with Ignition Keys 525

Overview 525

Ignition Keys and Clustering 527

xiii

PGP Universal Server Contents

Preparing Hardware Tokens to be Ignition Keys 527

Configuring a Hardware Token Ignition Key 528

Configuring a Soft-Ignition Passphrase Ignition Key 529

Deleting Ignition Keys 529

Backing Up and Restoring System and User Data 531

Overview 531

Creating Backups 532

Scheduling Backups 532

Performing On-Demand Backups 533

Configuring the Backup Location 533

Restoring From a Backup 535

Restoring On-Demand 535

Restoring Configuration 536

Restoring from a Different Version 540

Updating PGP Universal Server Software 543

Overview 543

Inspecting Update Packages 544

Establishing Software Update Settings 544

Checking for New Updates 545

Uploading Update Packages 545

Manually Installing an Update 545

Index 547

xiv

1

Introduction

This Administrator’s Guide describes both the PGP Universal Server

™

and PGP

Universal Satellite. It tells you how to get them up and running on your network,

how to configure them, and how to maintain them. This section provides a high-

level overview of PGP Universal Server.

In This Chapter

What is PGP Universal Server? ................................................................15

PGP Universal Server Product Family ......................................................16

Who Should Read This Guide ..................................................................16

Common Criteria Environments...............................................................17

Improvements in This Version of PGP Universal Server..........................17

Using the PGP Universal Server with the Command Line.......................17

Symbols....................................................................................................18

Getting Assistance ...................................................................................18

What is PGP Universal Server?

PGP Universal Server provides multiple encryption solutions managed from a

single console.

PGP Universal Server with PGP Universal Gateway Email gives you secure

messaging: it transparently protects your enterprise messages with little or no

user interaction.

The PGP Universal Server also replaces the PGP Keyserver product with a built-

in keyserver, and the PGP Admin product with PGP Desktop configuration and

deployment capabilities.

It automatically creates and maintains a Self-Managing Security Architecture

(SMSA) by monitoring authenticated users and their email traffic. You can also

send protected messages to addresses that are not part of the SMSA. The PGP

Universal Server encrypts, decrypts, signs, and verifies messages automatically,

providing strong security through policies you control.

15

PGP Universal Server Introduction

PGP Universal Satellite, a client-side feature of PGP Universal Server, extends

PGP security for email messages all the way to the computer of the email user,

it allows external users to become part of the SMSA, and it gives end users the

option to create and manage their keys on their own computer (if allowed by

the PGP administrator).

PGP Universal Server Product Family

PGP Universal Server functions as a management console for a variety of

encryption solutions. You can purchase any of the PGP Desktop applications or

bundles and use PGP Universal Server to create and manage client installations.

You can also purchase a license that enables PGP Gateway Email to encrypt

email in the mailstream.

The PGP Universal Server can manage any combination of PGP encryption

applications. PGP encryption applications are:

 PGP Universal Gateway Email provides automatic email encryption in the

gateway, based on centralized mail policy. This product requires

administration by the PGP Universal Server.

 PGP Desktop Email provides encryption at the desktop for mail, files, and

AOL Instant Messenger traffic. This product can be managed by the PGP

Universal Server.

 PGP Whole Disk Encryption provides encryption at the desktop for an

entire disk. This product can be managed by the PGP Universal Server.

 PGP NetShare provides transparent file encryption and sharing among

desktops. This product can be managed by the PGP Universal Server.

Who Should Read This Guide

This Administrator’s Guide is for the person or persons who implement and

maintain your organization’s PGP Universal Server environment. These are the

PGP administrators.

This guide is also intended for anyone else who wants to learn about how PGP

Universal Server works.

16

Page is loading ...

PGP Universal Server 2.1.2 User guide

Related papers

Other documents