PGP Corporation Logo
select United States productsPurchasedownloadssupportpartnersnewsroomcompanycareerscontact
.
.
.
 
PGP Desktop Enterprise
.

PGP Desktop Corporate: Technical Specifications

Technical Specifications

Supported Operating Systems

  • Windows Vista (all 32-bit and 64-bit versions)
  • Windows Server 2003 (SP1)*
  • Windows XP (SP1 or SP2)
  • Windows XP Tablet PC Edition 2005 (keyboard required)
  • Windows 2000 (SP4)
  • Mac OS X 10.4.x and 10.5.x (Universal Binary – Intel & PPC)**
* Full disk encryption functionality is not supported on Windows 2000 Server or 2003 Server.
** Full disk encryption functionality is only supported for non-boot disks on Mac OS X.

Localization

  • English
  • German
  • Japanese

Authentication Options

  • OpenPGP RFC 4880 keys
  • X.509 keys

Messaging Protocols

  • POP3
  • IMAP
  • SMTP
  • MAPI
  • Lotus Notes

Messaging  Security Standards

  • PGP/MIME RFC 3156
  • OpenPGP RFC 4880
  • S/MIME v3 RFC 2633
  • X.509 v3

Supported Storage Systems – PGP NetShare

  • Windows file shares (SMB, CIFS, & Samba)
  • Locally attached hard drives (internal & external)
  • USB flash drives

Supported Email Clients

  • Microsoft Outlook 2007 (Outlook 12), Outlook 2003 SP2, Outlook XP SP3, Outlook 2000 SP3, Windows Mail 6.0.6000.16386, Outlook Express 6, Entourage
  • Mozilla 1.7
  • Thunderbird 1.0
  • Lotus Notes 5.0.11, 6.x, and 7.0.1
  • Novell GroupWise 6.5.1 or later
  • Apple Mail 3.0, Mail 2.1.1

Supported IM Clients

  • AOL Instant Messenger 5.9.x, 6.5 for Windows
  • AOL Instant Messenger 4.7 for Mac OS X
  • Trillian 3.1 for Windows
  • Apple iChat 3.1.x, 4.0 for Mac OS X

Symmetric Key Algorithms

  • AES (up to 256-bit keys)
  • CAST
  • TripleDES
  • IDEA
  • Twofish

Symmetric Key Algorithms – PGP Whole Disk Encryption

  • AES 256-bit keys

Symmetric Key Algorithm – PGP NetShare

  • AES 256-bit keys in EME mode 

Hashes

  • SHA-2 (up to 512-bit hashes)
  • SHA-1
  • MD5
  • RIPEMD-160

Public Key Algorithms

  • Diffie-Hellman
  • DSA (1024-bit keys only)
  • RSA (up to 4096-bit keys)

Centralized Management Requirements

  • PGP Universal Server 2.7*
* PGP Universal Server requires a dedicated server. 

Two-Factor Authentication

Supported USB Tokens – PGP Desktop Email, PGP NetShare, PGP Virtual Disk, & PGP Zip

PGP Desktop Corporate recognizes and works with the following:
  • DoD Common Access Cards (CACs) with the ActivCard Gold 2.0 profile
  • Athena Smart Card Solutions smart cards, including the ASEKey USB token
  • AET SafeSign smart cards, including ASEKey 1.0
  • Axalto (formerly Schlumberger) smart cards, including the Cryptoflex 32K
  • SafeNet smart cards, including iKey 2032
  • Aladdin smart cards, including eToken PRO USB 16K, 32K, and 64K
  • GemPlus smart cards, including SafesITe and GemXpresso Pro, using GemSafe Libraries 4.2.0-015 (Gold)
PGP Desktop Corporate also recognizes and works with smart cards from other vendors, if the vendor includes a standards-based PKCS-11 library in their software drivers.

Supported Pre-Boot Authentication Smart Cards & USB Tokens

The following smart card readers are supported for communicating to a smart card at pre-boot time. These readers can be used with any supported removable smart card (it is not necessary to use the same brand of smart card and reader). Any CCID smart card reader is supported. The following readers have been tested by PGP Corporation:
  • OMNIKEY CardMan 3121 USB for desktop systems
  • OMNIKEY CardMan 6121 USB for mobile systems
  • ActivIdentity USB 2.0 reader
  • Reiner SCT CyberJack pinpad
  • Athena ASEDrive IIIe USB reader
PGP Whole Disk Encryption supports the following smart cards for pre-boot authentication:
  • ActiveIdentity ActivClientCAC cards, 2005 models
  • Aladdin eToken 64K, 2048-bit RSA-capable1
  • Aladdin eToken PRO USB Key 32K, 2048-bit RSA-capable1
  • Aladdin eToken PRO without 2048-bit capability (older smart cards)1
  • Athena ASEKey Crypto USB Token for Microsoft ILM2
  • Athena ASECard Crypto Smart Card for Microsoft ILM2
  • EMC RSA SecurID SID800 Token3
  • Charismathics CryptoIdentity plug 'n' crypt Smart Card only stick
  • S-Trust StarCOS smart card4
  • Rainbow iKey 3000
1 Other Aladdin eTokens, such as tokens with flash, should work provided they are APDU compatible with the supported tokens. OEM versions of Aladdin eTokens, such as those issued by VeriSign, should work provided they are APDU compatible with the supported tokens.
2 The Athena tokens are supported only for credential storage.
3 This token is supported only for credential storage. SecurID is not supported.
4 S-Trust SECCOS cards are not supported.
.
.