Re: PGP Universal Server 3.1.0

[Chris Green <cmgreen () UAB EDU>]

We have a separate test lab where we have a separate Universal Server we boot up for testing.  Since it only auths 
against AD and we have a limited number of macs to test with, it's exposed to internal IPs.

We have a pretty extensive set of tests we run each upgrade cycle for our supported versions of PGP in our lab 
environment.   Basic builds with Version X of PGP.  Can it report?  Can it enroll?  Can you do key recovery?  Can you 
upgrade it to the latest installer?  Can you upgrade our oldest version?

The only big thing we ever have to watch out for with PGP upgrade mechanics is when a system gets restored from backup, 
it "recovers" the IP address too which is bad for a server where they try to not let you login as root.

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of 
Youngquist, Jason R.
Sent: Monday, February 28, 2011 3:16 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] PGP Universal Server 3.1.0

We are currently running PGP Desktop version 10.0 and PGP Universal Server 2.12 (primary/secondary cluster) in VMWare.  
We are looking to upgrade to 3.1.0 and I was wondering if anyone has ran into any problems/issues.

Also, when going from one version of PGP Universal Server to another, do you test it out in a test environment first?  
If so, I'd be interested in how you do this in a virtual environment such as VMWare.  We tried it awhile ago, and ran 
into some issues because we didn't have a test AD server.

Please feel free to email me off list.


Thanks.
Jason Youngquist
Information Technology Security Engineer
Technology Services
Columbia College
1001 Rogers Street, Columbia, MO  65216
(573) 875-7334
jryoungquist () ccis edu<mailto:jryoungquist () ccis edu>
http://www.ccis.edu<http://www.ccis.edu/>