PGP Universal™ Server manages security policy across multiple applications to defend sensitive data and avoid the financial loss, legal ramifications, and brand damage resulting from a data breach. As the foundation of the PGP® Encryption Platform architecture, PGP Universal Server manages PGP Encryption Platform–enabled applications that provide email, disk, and network file encryption. PGP Universal Server provides:

• Key management-Creates, distributes, and stores encryption keys while maintaining the organisation's ability to allow authorised personnel to access encrypted data.
• Policy enforcement-Delivers centralised policy configuration and removes the risk of inconsistent or incorrect policy configuration.
• Reporting and logging-Provides visibility into the current state of data protection to help satisfy management and auditor requirements.
• Extensible framework-Reduces the time and cost of deploying future encryption applications by eliminating redundant management infrastructures.

Using PGP Universal Server, an organisation can deploy one encryption application to address an immediate tactical requirement and then deploy additional applications later, as required. This strategic approach to encryption allows the enterprise to quickly adapt to emerging requirements for encryption using a single encryption management console.

PGP Universal™ Server 2.9

Automate encryption across the enterprise with a single administrative console.

Part of the PGP® Encryption

Centrally manage and deploy multiple encryption applications to protect sensitive enterprise data

Enterprises are increasingly deploying encryption to protect their most sensitive information. Unfortunately, deploying point solutions to protect email, disks, and files involves deploying and managing multiple management consoles. This piecemeal approach prevents organisations from addressing new requirements in a timely, cost–effective manner.

PGP Universal Server manages security policy across multiple applications to defend sensitive data and avoid the financial loss, legal ramifications and brand damage resulting from a data breach. As the foundation of the PGP Encryption Platform architecture, PGP Universal Server manages PGP Encryption Platform–enabled applications that provide email, disk, and network file encryption. PGP Universal Server provides:

• Key management – Creates, distributes, and stores encryption keys while maintaining the organisation’s ability to allow authorised personnel to access encrypted data. 
• Policy enforcement – Delivers centralized policy configuration and removes the risk of inconsistently or incorrectly configured policy. 
• Reporting & logging – Provides visibility into the current state of data protection to help satisfy management and auditor requirements. 
• Extensible framework – Reduces the time and cost of deploying future encryption applications by eliminating redundant management infrastructures.

Automate Deployment and Ongoing Management

Based on policy, PGP Universal Server automates deployment, provisioning, key management, and policy enforcement for email, disk, and network file encryption. By allowing administrators to focus on familiar tasks, such as establishing groups and assigning policy and configuration, PGP Universal Server reduces administrator workloads and ensures consistent security policy.

Build for Tomorrow’s Needs

Using PGP Universal Server, an organisation can deploy one encryption application to address an immediate tactical requirement and then deploy additional applications later, as required. This strategic approach to encryption allows the enterprise to quickly adapt to emerging requirements for encryption using a single encryption management console.

Enterprises are increasingly deploying encryption to protect their most sensitive information. Unfortunately, deploying point solutions to protect email, disks, and files involves deploying and managing multiple management consoles. This piecemeal approach prevents organizations from addressing new requirements in a timely, cost-effective manner.

PGP Universal™ Server manages security policy across multiple applications to defend sensitive data and avoid the financial loss, legal ramifications, and brand damage resulting from a data breach. As the foundation of the PGP® Encryption Platform architecture, PGP Universal Server manages PGP Encryption Platform–enabled applications that provide email, disk, and network file encryption. PGP Universal Server provides:

• Rapid deployment process – Speeds deployment by automating the installation and configuration process.

Reduced Operation Costs

• Unified administration console – Eliminates the cost of deploying and maintaining multiple consoles and client applications and minimizes the risk of inconsistent security policy. 
• Enterprise integration – Leverages existing enterprise directories, PKIs, systems management tools, and email hygiene and outbound content compliance solutions. 
• Logging, monitoring, & reporting – Reduces the time needed to audit activities for multiple encryption applications as part of a regulatory compliance program. 
• Extensible protection – When licensed for multiple applications, allows management of any other PGP Encryption Platform–enabled application, including PGP® Whole Disk Encryption, PGP® Desktop Email, and PGP® NetShare.
  

General

What is PGP Universal Server and why is it important?

PGP Universal Server is the administration server that provides centralized encryption management for PGP Encryption Platform–enabled applications, including PGP® Desktop Email, PGP® Whole Disk Encryption, PGP® NetShare, and PGP Universal™ Gateway Email. Deploying PGP Universal Server allows an organization to control and monitor the enforcement of information security policy across multiple PGP® applications.

What business problem does PGP Universal Server solve?

PGP Universal Server addresses the business need to secure data across the enterprise while controlling costs, reducing administrative burdens, and making encryption transparent to end users. PGP Universal Server enables organizations to take a data-centric approach to securing data, protecting data while it is in use, at rest, and in transit. With PGP Universal Server, businesses can widely deploy encryption applications, securing data while automating policy enforcement and delegating administration.

What are the key benefits of PGP Universal Server?

As the single administrative console for deploying encryption applications across the enterprise and out to business partners, PGP Universal Server enables organization to:

• Reduce operational costs-As the common management console for PGP Encryption Platform–enabled applications, PGP Universal Server removes the need for learning, deploying, managing, and supporting different management systems for each encryption application. 
• Address policy enforcement and risk of inconsistent or inadequate policies-PGP Universal Server enables administrators to define a consistent set of policies that can be shared across the enterprise and with partners and customers, delivering uniform policy enforcement. Organizations with inconsistent or inadequate policy enforcement often ignore or do not recognize the problem, increasing their risk by creating a false sense of security. This problem is exacerbated when multiple encryption management systems are deployed by the organization. 
• Adapt to evolving audit requirements-As industry and government regulations continue to change and audits seek to promote best practices, PGP Universal Server policy can quickly be adapted to update policy enforcement across encryption applications and users. 
• Build for future needs-As organizations increasingly adopt an enterprise encryption strategy, PGP Universal Server provides them with an extensible framework to add PGP and third-party PGP Encryption Platform–enabled applications, as needed.

How does PGP Universal Server work?

PGP Universal Server provides a Web-based administrative interface to establish and control automated user and key management, provisioning, policy enforcement, and logging. PGP Universal clients access key management, policy, and logging services through standard Web-enabled protocols Simple Object Access Protocol (Secure) (SOAPS). PGP Universal Server runs on a security-hardened Linux derivative on customer-preferred compatible server hardware or in a VMware ESX environment. For more information on hardware and virtualization system requirements see the Requirements tab.

What is the end-user experience?

For administrators, PGP Universal Server is accessed through a Web browser–based administrative console. End users are unaware of PGP Universal Server as it automates key management, provides policy updates, delivers software updates, and logs events.

What's new in PGP Universal Server 2.9?

PGP Universal Server 2.9 expands PDF Messenger secure delivery enforcement options for Universal Gateway Email. In addition, Universal Server 2.9 adds granular configuration control over end-user permissions for Whole Disk Encryption 9.9 clients, Windows and Mac clients, as well as new application-based policy enforcement in NetShare 9.9.

What languages (localization) does PGP Universal Server support?

PGP Universal Server has a Web-based administration interface that is available in English. PGP Universal Server can deploy and manage PGP Encryption Platform–enabled applications that are localized in English, German, and Japanese.

Is the product source code available for download?

Yes. To validate the integrity of its products, PGP Corporation releases all product source code, including PGP Universal Server, for peer review. For more information, see PGP® Source Code.

How does PGP Universal Server fit into the PGP Encryption Platform architecture?

PGP Universal Server provides the management and automated services that are the foundation for the PGP Encryption Platform.

Technical

What are the hardware requirements for PGP Universal Server?

PGP Universal Server runs on a security-hardened Linux derivative on customer-preferred compatible server hardware or in a VMware ESX environment. For more information on hardware and virtualization system requirements, see the Requirements tab.

Interoperability

Will PGP Universal Server work with existing PGP Desktop 8.x products?

Yes. Existing keys from internal users of PGP Desktop can be added to PGP Universal Server by the network administrator. External users can submit their keys to PGP Universal Server as they become part of PGP Universal Server Self-Managing Security Architecture.

Will PGP Universal Server work with existing PGP Desktop 9.0.x and PGP Universal Satellite 2.0.x products?

Yes. PGP Universal Server 2.8 can provide policy and keys to existing installations of PGP Desktop 9.0.x and PGP Universal Satellite 2.0.x, allowing an organization to upgrade to PGP Universal Server 2.8 and deploy updated clients at a later date.

Can I continue to use my existing PGP Desktop keys or X.509 certificates?

Yes. Existing PGP Desktop keys or X.509 certificates can be imported into PGP Universal Server and any PGP Universal Server–managed application.

Will PGP Universal Server work with certificates from my existing Certificate Authority (CA)?

PGP Universal Server can obtain previously issued X.509 certificates of recipients from existing CAs' LDAP directories to enable email encryption, when used in conjunction with PGP Desktop Email or PGP Universal Gateway Email.

How does PGP Universal Server issue X.509 certificates?

PGP Universal Server can issue X.509 certificates by functioning as a subsidiary CA to a third-party CA or it can be configured to act as a self-signed CA.

How does PGP Universal Server work with LDAP?

PGP Universal Server can be synchronized with an existing corporate directory via LDAP. This directory synchronization enables pre-population of account names, alternative email addresses for users, and detection of Microsoft Exchange group mailing lists.