ACS PGP Desktop Installation Guide

Transcription

1 ACS PGP Desktop Installation Guide

2 ACS ENCRYPTION SERVICES / EDUCATIONAL SUPPORT ACS PGP Desktop Installation Guide ACS PGP Desktop Installation Guide Affiliated Computer Services, Inc. ACS Corporate Headquarters 2828 North Haskell Dallas, TX For Technical Support Call Toll Free # or es.helpdesk@acs-inc.com

3 Table of Contents...4 Section 2 Disable PGP Proxy...14 Section 3 New Login Step...15 v1.2 Affiliated Computer Services, Inc. 3

4 Important Installation Notes: You must follow each step carefully or PGP Desktop will not be configured correctly and you could put sensitive ACS data at risk. ATTENTION LAPTOP USERS: Do not disconnect the AC power from your computer during this process. Doing so could cause a loss of data. Open your program before beginning this section. Do not close your program during this enrollment section. Doing so will cause a problem and re-enrollment will be necessary. 1. After the restart and logon from the previous step, the system displays the PGP Enterprise Enrollment Assistant window (Figure 1). Enter your address, confirm it, and click Next. An is then automatically sent to your Inbox (see next step). Figure 1 v1.2 Affiliated Computer Services, Inc. 4

5 2. The received (sent automatically in the previous step) is read by the enrollment wizard automatically upon arrival and; the Enrollment Assistant window (Figure ) should go from having a disabled (grayed-out) Next button to being an enabled button (Figure ) that you need to click on to continue. Note: If you do not see the Next button enabled, go to your Inbox and open the (sent from the PGP server). You should see the message window open and then disappear. Close the if it does not disappear after one minute. Go back to your Inbox. You should no longer see the (sent in the previous step). Now, go back to the PGP Enrollment Assistant and check for the Next button being enabled. If it is enabled, click on it to continue. If the Next button is still not enabled... a. Go to your Inbox and delete the (sent automatically in the previous step); b. Click on the Cancel button (cancelling out of PGP) and; c. Restart your computer. After restarting and logging on, re-open your program and begin again at Step 1 in Section 2 PGP Enrollment and Encryption. Figure 2 v1.2 Affiliated Computer Services, Inc. 5

6 3. Click on the Next button (Figure ). Figure 3 4. The User Type screen is then displayed with the option to select either I am a new user or I have used PGP before and I have existing keys (Figure ). Select I am a new user and click on the NEXT button. Note: Select I am a new user even if you have had PGP before. You are being set up on a new PGP server with this installation. Figure 4 v1.2 Affiliated Computer Services, Inc. 6

7 5. The Welcome to the PGP Messaging Key Setup Assistant screen opens (Figure ). Click on Next to continue. Note: If you already have keys created from a previous version of PGP, then the installation will automatically take you directly to the Whole Disk Encryption Assistant, page 12 (number 10, figure 18). Figure 5 v1.2 Affiliated Computer Services, Inc. 7

8 The Key Source Selection screen is displayed. Select New Key (Figure ) and Click the Next button. Figure 6 6. At the Key Passphrase screen, you need to enter a passphrase (password) with a minimum of eight alpha-numeric characters that you can easily remember and click Next (Figure ). This passphrase will be known as your Passphrase. Note: You may use any combination of letters, numbers, and symbols for your Passphrase. Once you have entered your new passphrase and click on Next, you may see a window indicating your passphrase did not meet the suggested quality of 65 out of 100. Currently there is no requirement for a minimum passphrase quality. If you entered a minimum of eight characters, click Next to continue. When creating your passphrase, keep in mind that this is case sensitive and takes into account all spaces and punctuation. Figure 7 v1.2 Affiliated Computer Services, Inc. 8

9 7. At the next screen, Key Reconstruction, (Figure ), you are required to create five questions (or use the questions provided) and answers for Key Reconstruction which is used for future security needs (but needs to be completed during enrollment). You can use the provided questions or you can change them to what you like. Click Next when you have entered all five questions and answers. Figure 8 8. Once the key is created, click on the Next button (Figure ). Figure 9 v1.2 Affiliated Computer Services, Inc. 9

10 9. The Messaging Key Setup Assistant is completed. Click Finish to continue (Figure ). Figure The next set of screens is for the Whole Disk Encryption Assistant. Click Next to continue (Figure ). Figure 11 v1.2 Affiliated Computer Services, Inc. 10

11 11. At the Passphrase Assignment screen, you need to enter your new passphrase (password) used at boot/startup of your computer (Figure ). Enter a minimum of eight alpha-numeric characters that you can easily remember and then re-enter them for confirmation. You may use the same passphrase you entered earlier for your passphrase. Click on Next to continue. Note: You may use any combination of letters, numbers, and symbols for your passphrase. Once you have entered your new passphrase and clicked on Next, you may see a window indicating your passphrase did not meet the suggested quality of 65 out of 100. Currently there is no requirement for a minimum passphrase quality. If you entered a minimum of eight characters in the previous step, click Next to continue. When creating your passphrase, keep in mind that this is case sensitive and takes into account all spaces and punctuation. Figure 12 v1.2 Affiliated Computer Services, Inc. 11

12 You then see the screen stating You have successfully started the encryption of your boot disk. (Figure ). Click Next and go to the next step. Figure The final screen states PGP Desktop is ready for use. Click Finish (Figure ). The drive is now being encrypted and the process will continue automatically until completed. Note: If the computer is shutdown, the encryption process will pause and then continue once the computer is restarted. Continue to the next Step. Figure 14 v1.2 Affiliated Computer Services, Inc. 12

13 Open your program window and send an to yourself. The must include a subject line and a message (such as TEST). 13. Click on Start (on your Desktop) then Programs and select PGP > PGP Desktop. 14. Click on All Keys under PGP Keys. Verify your name appears in the list (Figure ). Figure 15 Process Note You must complete all the steps in this document or your system will not operate correctly. Proceed to Section 3 Disable PGP Proxy. v1.2 Affiliated Computer Services, Inc. 13

14 Section 2 Disable PGP Proxy Section 2 Disable PGP Proxy 1. At your desktop, Click on Start then Programs and select PGP > PGP Desktop. 2. Click on the Tools menu and then click on Use PGP Proxy (to deselect or disable it) (Figure ) then confirm that a checkmark is not shown beside the menu item. Figure A pop-up window will appear stating the program will need to be restarted for the change to take effect (Figure ). Click OK. Figure Close the PGP Desktop program. If your program (such as Outlook) is running, close and then start it. Process Note The encryption of your drive will continue to run in the background. It may take several hours to complete the encryption, depending primarily on the size of your drive. You may work in other applications during this time however; you may notice your computer running slower than normal. If you shut down your computer before the encryption is completed, the encryption process will pick up where it left off the next time you start your computer. Once the encryption is completed, you are finished with the PGP Whole Disk Encryption Process. v1.2 Affiliated Computer Services, Inc. 14

15 Section 3 New Login Step Section 3 New Login Step After the above enrollment and encryption is completed, you are required to enter your passphrase during startup (boot). The screen below is what a user will see during startup (Figure ). Type your passphrase (boot passphrase) in the window and press ENTER to proceed to the Windows startup process. Note: Pressing the TAB key before you type will make your passphrase visible while typing. Figure 18 v1.2 Affiliated Computer Services, Inc. 15