Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Safeguard, PGP Desktop and Windows 7

My company has a laptop image that is windows 7 SP-1, 32-bit with Sophos Safeguard built in. Safeguard is used to encrypt the c: drive. I tried to install PGP desktop, this install required a restart, the system comes up, but at the CRTL ALT Del prompt, the system is gacefully shutdown. Each subsequent restart results in a gracefull shutdown, making the laptop unuseable.

I know that the install of PGP in interacting with something (assume Sophos Safeguard) but really don't know.

Has anyone ever seen this issue before?

Thanks,

Tom.

:20661


This thread was automatically locked due to age.
  • Hi Tom,

    thank you very much for posting. With regards to your description I can tell you that we are not aware of that particular problem in combination with PGP.

    However, the question would be what detailed software of PGP are you using? If you are using another encryption software this could cause side effects which are not predictable at this point. But with regards to your description I would advise to check if the software changes the ProgramData section in any way as SGN stores system relevant information there which must not be changed else the machine will shut down forcefully. This is jut one approach - it might even make sense to open a ticket with the local support with some further information.

    Regards

    Dan

    :20693
  • Dan,

    thanks for the reply. I am using PGP enterpise, unmanaged, version 10.2MP3. the license allows access to all PGP functionality including whole disk encryption. I am also using Safeguard 5.50.

    Could you expand on your answer regarding the forced shutdown? What is checked and when in the boot process it checked? That sounds like the behavior that I am seeing, however I am not able to look at the program data after the system has been installed as the system will not stay up long enough to log into it.

    thanks,

    Tom.

    :20729
  • Hi Tom,

    providing that information on the version in use. Based on that there are two possible scenarios that you should focus on:

    1. Please make sure that you have not installed two disk encryption products at the same time. This can cause unpredictable side effects meaning that you don't have a shutdown happening initiated by SGN but eventually a BSOD which is not reported (Did you already try to disable automatic reboot on system failure?)

    2. SafeGuard Enterprise uses C:\ProgramData\Utimaco\*.* to store product relevant information. This folder is monitored all the time by the product. In case that these sub folders are changed or access is not possible (maybe blocked by AV software for example) we will forcefully shut down the machine to prevent corruption of relevant data. This is something that can't be turned off.

    However, you could try to boot into safe mode and see if you the same behavior there?

    Another option would be to install PGP first on a system and then check if they do create any handles in the above mentioned section.

    Last but not least (and this is the first thing I'd check) install PGP with SGN but ensure that the PGO disk encryption module is not installed.

    Regards

    Dan

    :20753
  • Hello, we encounter same problem with PGP Desktop 10.2 MP3 running over W7 + SafeGuard Enterprise 5.60.1.7.

    We planned to use PGP for its NetShare function only while SafeGuard encrypts the whole disk.

    According to our tests, PGP Desktop and the simple SafeGuard (no policy) client on the computer is enough to make the system crash.

    Installing PGP Desktop without the SSO functionality (using msiexec /I mypackage.msi PGP_INSTALL_SSO=0) does not avoid the system crash.

    Installing PGP first and then SafeGuard worked on a test VM; this solution however is not satisfactory...

    Regards,

    Bruno.

    :20779
  • Any idea what would happen if the free version of PGP is installed? I belive that this version only enable the PGP zip functionality.

    Thanks,

    Tom.

    :20789
  • Dear all, we could finally install PGP Desktop on a W7 computer protected by SafeGuard Enterprise.

    We installed PGP Desktop using following command :

    msiexec /I myPGPpackage.msi INSTALL_PGP_WDE=0

    This disables the installation of the Whole Disk Encryption option which seems to conflict with SGN (and we can understand this!).

    Regards,

    Bruno.

    :20791
  • Hi Bruno,

    thank you very much for doing such intensive tests =)

    Actually you have confirmed my initial idea that the full disk part of PGP is the problem. Can the others also confirm that is solves their problems?

    Regards

    Dan

    :20805
  • Sorry, correct command is

    msiexec /I myPGPpackage.msi PGP_INSTALL_WDE=0

    :21005
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?