Removing PGP WDE from the command line in OS X or Linux.

Removing PGP Whole Disk Encryption from the command line in OS X or Linux.
These steps were performed on OS X 10.7 * 10.8 but should on other versions also.

First Verify that the drive is encrypted and get the disk number
1. Go to command line and type "sudo pgpwde --status"
2. You should see a response saying either the "Encryption Process is running in the background." or something stating the drive is fully encrypted.

Steps to decrypt
1. Open the command line and type "sudo pgpwde --decrypt --disk # --passphrase ''
2. type "sudo pgpwde --status" and you should see "Encryption removal process is running in the background"
3. Continue to monitor the "sudo pgpwde --status" command until the decryption is complete.

If you reboot and notice that the PGP BootGuard is still showing even after decrypting run the following command.
1. Go to command line and type "sudo pgpwde --unstrument --disk 0"

Removing PGP from command line in Windows

First Verify that the drive is encrypted and get the disk number
1. Go to command line and type "sudo pgpwde --status"
2. You should see a response saying either the "Disk 0 is Encrypted" or "Encryption Process is running in the background."
3. Make a note of the disk number

Steps to decrypt
1. Open the command line and type and navigate to the pgp folder inside of Program Files(x86)
2. Type the following command "pgpwde --decrypt --disk #  --passphrase "universalpassword"
3. Type "pgpwde --status" and you should see "Encryption removal process is running in the background"

3. Continue to monitor the "sudo pgpwde --status" command until the decryption is complete.

Installing PGP Whole Disk Encryption on Linux Workstations

Note: This installation was tested on Ubuntu 10.04 64bit with PGP WDE Version, 10.2.0 Build 2233.

Installation

1. Open the terminal and issue the following command:

                - "chmod +x pgp_desktop_10.2.0.2233_linux_ub10.04_x86_64.bsx"

2. Open the terminal and issue the following command:

                - "sudo ./ pgp_desktop_10.2.0.2233_linux_ub10.04_x86_64.bsx "

3. Press enter to read the license

4. Type "y" to agree to the terms of the license.

5. Reboot the workstation

Configuring Whole Disk Encryption

1. Make sure the username of the logged in linux user is the exact same as the domain username.

2. Open a terminal
3  Issue the following command to configure PGP to point to your PGP Universal Server

            - sudo pgpconfigure "ovid=&mail=*&admin=1"

4. Reboot the workstation

5. Login as the user that needs to enroll and issue the following command.
           - pgpenroll --enroll (Note: Do not use sudo)

6. When prompted for a username type you Domain credentials

7. And you should see output similar to the screen below.

8. Now reboot the workstation and you should be presented with the grey bootguard.
9. Type your password and hit enter.

10. Once you load the desktop open the terminal
11. To verify whole disk encryption is enabled run the following commands.

                "pgpwde --status"

12. The output should confirm that the disk is either encrypted or in process of encrypting.

PGP WDE Bootguard Password not synchronized with Active Directory Account

PGP Whole Disk Encryption does not support single sign-on functionality on Linux  and Mac OS X workstations. What this means for the user is that when you enroll in PGP the first time it will sync with your current password.  However whenever you change your Active Directory password your PGP bootguard password will not automatically be refreshed. To refresh the boot guard password follow the steps below.



1. Open the terminal
2. Run the following command.

pgpwde --change-passphrase --disk 0 --user username --domain 'domainname' --passphrase 'yourpassphrase' --new-passphrase 'yournewpassphrase' 

Reference:
http://www.symantec.com/business/support/index?page=content&id=TECH194688