Symantec Encryption Desktop for Windows Release Notes 10.4.2 Symantec Encryption Desktop 10.4.2 for Windows Release Notes Documentation version: 10.4.2 Legal Notice Copyright © 2018 Symantec Corporation. All rights reserved. Symantec, the Symantec Logo, the Checkmark Logo and are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. The product described in this document is distributed under licenses restricting its use, copying, distribution, and decompilation/reverse engineering. No part of this document may be reproduced in any form by any means without prior written authorization of Symantec Corporation and its licensors, if any. THE DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. SYMANTEC CORPORATION SHALL NOT BE LIABLE FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING, PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE INFORMATION CONTAINED IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE. Symantec Corporation 350 Ellis Street Mountain View, CA 94043 http://www.symantec.com Technical Support Symantec Technical Support maintains support centers globally. Technical Support’s primary role is to respond to specific queries about product features and functionality. The Technical Support group also creates content for our online Knowledge Base. The Technical Support group works collaboratively with the other functional areas within Symantec to answer your questions in a timely fashion. For example, the Technical Support group works with Product Engineering and Symantec Security Response to provide alerting services and virus definition updates. Symantec’s support offerings include the following: ■ A range of support options that give you the flexibility to select the right amount of service for any size organization ■ Telephone and/or Web-based support that provides rapid response and up-to-the-minute information ■ Upgrade assurance that delivers software upgrades ■ Global support purchased on a regional business hours or 24 hours a day, 7 days a week basis ■ Premium service offerings that include Account Management Services For information about Symantec’s support offerings, you can visit our website at the following URL: www.symantec.com/business/support/ All support services will be delivered in accordance with your support agreement and the then-current enterprise technical support policy. Contacting Technical Support Customers with a current support agreement may access Technical Support information at the following URL: www.symantec.com/business/support/ Before contacting Technical Support, make sure you have satisfied the system requirements that are listed in your product documentation. Also, you should be at the computer on which the problem occurred, in case it is necessary to replicate the problem. When you contact Technical Support, please have the following information available: ■ Product release level ■ Hardware information ■ Available memory, disk space, and NIC information ■ Operating system ■ Version and patch level ■ Network topology ■ Router, gateway, and IP address information ■ Problem description: ■ Error messages and log files ■ Troubleshooting that was performed before contacting Symantec ■ Recent software configuration changes and network changes Licensing and registration If your Symantec product requires registration or a license key, access our technical support Web page at the following URL: support.symantec.com Customer service Customer service information is available at the following URL: www.symantec.com/business/support/ Customer Service is available to assist with non-technical questions, such as the following types of issues: ■ Questions regarding product licensing or serialization ■ Product registration updates, such as address or name changes ■ General product information (features, language availability, local dealers) ■ Latest information about product updates and upgrades ■ Information about upgrade assurance and support contracts ■ Information about the Symantec Buying Programs ■ Advice about Symantec's technical support options ■ Nontechnical presales questions ■ Issues that are related to CD-ROMs, DVDs, or manuals Support agreement resources If you want to contact Symantec regarding an existing support agreement, please contact the support agreement administration team for your region as follows: Asia-Pacific and Japan [email protected] Europe, Middle-East, and Africa [email protected] North America and Latin America [email protected] Symantec Encryption Desktop for Windows Release Notes 10.4.2 This document includes the following topics: ■ What's new in this release ■ Resolved issues ■ Known issues ■ Installation or upgrade ■ Documentation resources What's new in this release The Symantec Encryption Desktop 10.4.2 for Windows release includes the following improvements and fixes: ■ Compatibility added for Microsoft 10 Fall Creators Update (version 1709) (32-bit and 64-bit) This release supports the in-place upgrade to Windows 10 Fall Creators Update, without having to decrypt and re-encrypt your disk. For more information, see symantec.com/docs/HOWTO128174. ■ Added multiple security updates This release contains multiple security updates and enhancements to ensure strong protection against various security alerts. Symantec Encryption Desktop for Windows Release Notes 10.4.2 7 Resolved issues Note: For an updated list of system requirements for Symantec Encryption Desktop 10.4.2 for Windows, see symantec.com/docs/TECH248332. Resolved issues The following issues have been resolved in this release of Symantec Encryption Desktop for Windows. Symantec Encryption Desktop ■ On HP Z400 computers running in the UEFI mode, the Domain field on the preboot authentication screen now displays the domain name properly. [4008236] ■ Installing Symantec Encryption Desktop on a Windows client computer no longer causes network issues. The NetworkProvider registry settings are retained and PGPpwflt is appended properly to the registry settings on the client computer. [4070675] ■ Upgrading to the version 10.4.2 from an earlier version of Symantec Encryption Desktop that contains keys with bad signatures no longer causes key synchronization issues. The user enrollment process and the email encryption process are now successful. Also, any new policy settings are applied successfully on the client computer. [4156635] Symantec File Share Encryption ■ Users can successfully open the Microsoft Office files that are protected using Symantec File Share Encryption and stored in the shared folders. Computers no longer crash with a blue screen error message. Environment: Windows 7/10 computers. [4151822] [4151818] [4151820] PGP Messaging ■ The encrypted and signed emails that are sent on behalf of a user using the PGP-EML encoding format are no longer sent as attachments to recipients. Environment: Internal users using Outlook with the send-on-behalf-of permission enabled. [4106123] ■ The current enforced mail security policy is now properly displayed in the PGP Messaging > Security Policies section. Environment: Symantec Encryption Management Server with Symantec Encryption Desktop enabled for PGP Messaging. [4113007] Known issues This section lists the known issues, any available workarounds, and references to Symantec support center articles for using Symantec Encryption Desktop for Windows. Symantec Encryption Desktop for Windows Release Notes 10.4.2 8 Known issues Symantec Encryption Desktop ■ Incompatibility with Symantec Encryption Desktop when the Controlled Folder Access feature of Windows 10 version 1709 is enabled: On Windows 10 computers using Symantec Encryption Desktop 10.4.2 with the Controlled Folder Access feature enabled, Symantec Encryption Desktop does not work as expected. To work around this issue, disable the Controlled Folder Access feature and use Symantec Encryption Desktop. [4150124] ■ Preboot authentication fails: Users of Windows 10 (version 1709) workgroup may not be able to authenticate at the BootGuard screen of Symantec Encryption Desktop 10.4.2. To work around this issue, see the following Workarounds section. ■ Incompatibility of the Windows 10 (1709) Windows Automatic Restart Sign-On (ARSO) with Symantec Encryption Desktop: On Windows 10 (version 1709) workgroup computers using Symantec Encryption Desktop 10.4.2, Single Sign-On (SSO) may not work even when the policy is enabled. To work around this issue, see the following Workarounds section. [4129711]= Workarounds Perform either of the following workarounds before installing Symantec Encryption Desktop 10.4.2 or before auto-encryption begins on your client computer: • Workaround 1: Disable the Use my sign in info to automatically finish setting up my device after an update or restart option. Restart the computer twice. To see this option, navigate to Windows Settings > Accounts > Sign-in options > Privacy. For more information, refer to the Microsoft article, Winlogon Automatic Restart Sign-On (ARSO). • Workaround 2: Create the following registry: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies \System] DisableAutomaticRestartSignOn=dword:1. ■ Microsoft Windows 10 computers fail to resume