Symantec Mobile Encryption for ios. User's Guide

Transcription

1 Symantec Mobile Encryption for ios User's Guide

2

3 The software described in this book is furnished under a license agreement and may be used only in accordance with the terms of the agreement. Version Last updated: January Legal Notice Copyright (c) 2013 Symantec Corporation. All rights reserved. Symantec, the Symantec Logo, PGP, Pretty Good Privacy, and the PGP logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Java is a registered trademark of Oracle and/or its affiliates. Other names may be trademarks of their respective owners. The product described in this document is distributed under licenses restricting its use, copying, distribution, and decompilation/reverse engineering. No part of this document may be reproduced in any form by any means without prior written authorization of Symantec Corporation and its licensors, if any. THE DOCUMENTATION IS PROVIDED"AS IS"AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. SYMANTEC CORPORATION SHALL NOT BE LIABLE FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING, PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE INFORMATION CONTAINED IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE. The Licensed Software and Documentation are deemed to be commercial computer software as defined in FAR and subject to restricted rights as defined in FAR Section "Commercial Computer Software - Restricted Rights" and DFARS , et seq. Commercial Computer Software and Commercial Computer Software Documentation, as applicable, and any successor regulations. Any use, modification, reproduction release, performance, display or disclosure of the Licensed Software and Documentation by the U.S. Government shall be solely in accordance with the terms of this Agreement. Symantec Corporation 350 Ellis Street Mountain View, CA Symantec Home Page ( Printed in the United States of America

4

5 Contents About Symantec Mobile Encryption for ios Overview Important Terms Available User Assistance Technical Support Contacting Technical Support Licensing and registration Customer service Support agreement resources Installing Symantec Mobile Encryption for ios System Requirements Installing Symantec Mobile Encryption on Your Device Manually Configuring Your Device without a Proxy Server Manually Configuring Your Device with a Proxy Server Automatically Configuring Your Device with a Configuration File About Key Modes Upgrading from PGP Viewer for ios Re-enrolling to a Symantec Encryption Management Server Uninstalling Symantec Mobile Encryption Using Symantec Mobile Encryption for ios About Encrypted Messages Opening PGP-EML Messages Opening PGP/MIME and PGP Partitioned text/html Messages Opening PGP Partitioned text/plain Messages Verifying Signatures About Attachments Opening Attachments About Sending Messages Replying to Messages Sending New Encrypted Messages Forwarding Messages How Messages are Processed if Keys are Not Found Viewing Sent Messages Working with Saved Draft Messages Using the Clipboard to Decrypt Text About Keys Importing Keys Viewing or Deleting Users' Keys Settings Clearing Caches Working with Server Settings Retrieving the Latest Policy from the Server

6 ii Contents Turning Signature Verification On or Off Turning Message Signing On or Off Viewing the Help, License, or Version Information

7 1 About Symantec Mobile Encryption for ios Symantec Mobile Encryption for ios allows you to send and receive encrypted from devices running Apple ios software. You can create new encrypted messages, reply/reply all/forward encrypted messages received, or forward encrypted messages with or without attachments. If you have been using PGP Viewer version 1.x, you can upgrade to this version of Symantec Mobile Encryption. Symantec Mobile Encryption requires a managed account on a Symantec Encryption Management Server with the LDAP Directory Synchronization feature enabled. If you do not have an account on the server, an account is created for you when you enroll. The Symantec Mobile Encryption for ios User's Guide explains how to use Symantec Mobile Encryption for ios on your mobile device. Note: If you are connecting to a PGP Universal Server version 3.2, you are only able to decrypt messages. To take full advantage of the features of Symantec Mobile Encryption for ios, including encrypted replies, you must be connecting to the latest server (Symantec Encryption Management Server version 3.3) with mobile encryption enabled. Contact your administrator for more information of capabilities you get from this application. In This Chapter Overview...1 Important Terms...2 Available User Assistance...2 Technical Support...3 Overview The following is the list of general things you need to do to use Symantec Mobile Encryption for ios: 1 Configure the client on your device to receive from the account managed by your organization's Symantec Encryption Management Server. This is outside the scope of this document. Contact your organization's administrator or IT staff for information about the account managed by your organization's Symantec Encryption Management Server. 2 Install and configure Symantec Mobile Encryption for ios on your ios device. This information is covered in this document. Contact your administrator for information specific to your organization. 3 Open, decrypt, and read encrypted messages in your client using Symantec Mobile Encryption for ios. This information is also covered in this document.

8 2 About Symantec Mobile Encryption for ios Important Terms 4 Reply to encrypted messages or send new encrypted messages using Symantec Mobile Encryption for ios. This information is also covered in this document. See Installing Symantec Mobile Encryption for ios (on page 7) See Using Symantec Mobile Encryption for ios (on page 13) Important Terms Understanding the following terms makes it easier to use Symantec Mobile Encryption: Symantec Mobile Encryption for ios: A software product from Symantec Corporation that encrypts, decrypts, verifies, and displays PGP-encrypted messages and attachments from a Symantec Encryption Management Server-managed account on an ios device. ios device: A device from Apple that runs the ios mobile operating system. For example, the iphone and ipad are ios devices. PGP-encrypted message: An message (and attachments) that has been encrypted by a Symantec encryption application. Symantec Encryption Management Server: A software/hardware product from Symantec Corporation used for configuration and management of Symantec encryption applications. You must have an account on a Symantec Encryption Management Server with the LDAP Directory Synchronization feature enabled to use Symantec Mobile Encryption for ios. encrypt: To scramble data so that it is unreadable. decrypt: To take encrypted data and make it readable again. enrollment: A process that establishes a relationship between a Symantec Encryption Management Server and client software, such as Symantec Mobile Encryption for ios. This can be done for Symantec Mobile Encryption for ios automatically using a configuration file or manually by entering the required configuration information. LDAP Directory Synchronization: a feature of Symantec Encryption Management Server that lets your Symantec Encryption Management Server query your organization's LDAP directory server (a Microsoft Active Directory server, for example), thus accessing existing information about configured users, including their authentication credentials. Available User Assistance Information about Symantec Mobile Encryption for ios is available from several sources: Symantec Mobile Encryption for ios on-device help is available from within the application itself. To view the on-device help, open Symantec Mobile Encryption for ios, then tap Help.

9 About Symantec Mobile Encryption for ios Technical Support 3 Symantec Mobile Encryption for ios Release Notes are available from the Symantec Product Page ( under "Mobile Encryption." The release notes include the latest information available about the current release of Symantec Mobile Encryption for ios. Symantec Mobile Encryption for ios User's Guide is also available on the Symantec PGP Product Page The user's guide includes information for people using Symantec Mobile Encryption on their ios devices. Technical Support Symantec Technical Support maintains support centers globally. Technical Support s primary role is to respond to specific queries about product features and functionality. The Technical Support group also creates content for our online Knowledge Base. The Technical Support group works collaboratively with the other functional areas within Symantec to answer your questions in a timely fashion. For example, the Technical Support group works with Product Engineering and Symantec Security Response to provide alerting services and virus definition updates. Symantec s support offerings include the following: A range of support options that give you the flexibility to select the right amount of service for any size organization Telephone and/or Web-based support that provides rapid response and up-to-the-minute information Upgrade assurance that delivers software upgrades Global support purchased on a regional business hours or 24 hours a day, 7 days a week basis Premium service offerings that include Account Management Services For information about Symantec s support offerings, you can visit our Web site at the following URL: All support services will be delivered in accordance with your support agreement and the then-current enterprise technical support policy. Contacting Technical Support Customers with a current support agreement may access Technical Support information at the following URL: Before contacting Technical Support, make sure you have satisfied the system requirements that are listed in your product documentation. Also, you should be at the computer on which the problem occurred, in case it is necessary to replicate the problem. When you contact Technical Support, please have the following information available: Product release level

10 4 About Symantec Mobile Encryption for ios Technical Support Hardware information Available memory, disk space, and NIC information Operating system Version and patch level Network topology Router, gateway, and IP address information Problem description: Error messages and log files Troubleshooting that was performed before contacting Symantec Recent software configuration changes and network changes Licensing and registration If your Symantec product requires registration or a license key, access our technical support Web page at the following URL: Customer service Customer service information is available at the following URL: Customer Service is available to assist with non-technical questions, such as the following types of issues: Questions regarding product licensing or serialization Product registration updates, such as address or name changes General product information (features, language availability, local dealers) Latest information about product updates and upgrades Information about upgrade assurance and support contracts Information about the Symantec Buying Programs Advice about Symantec's technical support options Nontechnical presales questions Issues that are related to CD-ROMs or manuals

11 About Symantec Mobile Encryption for ios Technical Support 5 Support agreement resources If you want to contact Symantec regarding an existing support agreement, please contact the support agreement administration team for your region as follows: Asia-Pacific and Japan Europe, Middle-East, Africa North America, Latin America customercare_apac@symantec.com semea@symantec.com supportsolutions@symantec.com

12

13 2 Installing Symantec Mobile Encryption for ios This section provides information on the system requirements, and how to install and uninstall Symantec Mobile Encryption for ios, as well as upgrade from PGP Viewer for ios version 1.x. In This Chapter System Requirements... 7 Installing Symantec Mobile Encryption on Your Device... 7 Upgrading from PGP Viewer for ios...11 Re-enrolling to a Symantec Encryption Management Server...11 Uninstalling Symantec Mobile Encryption...12 System Requirements Symantec Mobile Encryption for ios supports the following devices: iphone 4, 4S and 5 ipad 1, ipad 2, and ipad HD ipod Touch 4th and 5th generation Symantec Mobile Encryption for ios runs on the following operating systems: ios 5.x ios 6 Symantec Mobile Encryption for ios supports all resolutions of these devices in both portrait and landscape orientations, including 4" screens. Symantec Mobile Encryption for ios requires a managed account on a Symantec Encryption Management Server (version 3.3 or later) with the LDAP Directory Synchronization feature enabled. If you do not have an account on the server, an account is created for you when you enroll. Note: You can install Symantec Mobile Encryption for ios on an ios device without having a managed account on a Symantec Encryption Management Server. You cannot configure or use Symantec Mobile Encryption for ios without such an account, however. Installing Symantec Mobile Encryption on Your Device The Symantec Mobile Encryption app is obtained from the Apple App Store.

14 8 Installing Symantec Mobile Encryption for ios Installing Symantec Mobile Encryption on Your Device Note: Access to the Apple App Store is required for this procedure. To install Symantec Mobile Encryption 1 On your ios device, access the Apple App Store. 2 In the Search field (in the upper right corner of the screen), enter Symantec Mobile Encryption, then tap Search. 3 Tap the icon for Symantec Mobile Encryption. 4 On the Symantec Mobile Encryption page, tap FREE under the Symantec Mobile Encryption icon. 5 Tap INSTALL APP. 6 If the Apple ID Password dialog box appears, enter your Apple ID password, then tap OK. Symantec Mobile Encryption is installed onto your ios device. 7 Once the app has been installed, continue with configuring your device. See also Manually Configuring Your Device without a Proxy Server (on page 8) Manually Configuring Your Device with a Proxy Server (on page 9) Automatically Configuring Your Device with a Configuration File (on page 10) Manually Configuring Your Device without a Proxy Server Use manual configuration without the proxy server option if you did not receive a configuration file from your Symantec Mobile Encryption administrator and you do not connect to your Symantec Encryption Management Server through a proxy server. To manually configure Symantec Mobile Encryption 1 After installation, tap the Symantec Mobile Encryption icon on your ios device. 2 On the User License screen, tap Accept. 3 Tap Setup. 4 On the Account screen, in the Server field, enter the fully qualified domain name of your organization's Symantec Encryption Management Server. For example, keys.example.com. You can also enter the IP address, if you have that information. 5 In the User field, enter your user name on your organization's Symantec Encryption Management Server. 6 In the Password field, enter the password for your account. 7 Tap Next. 8 On the Network Settings screen, tap Next. 9 Do one of the following: If you have a pre-existing GKM key, you are prompted to enter the passphrase of the private key on the Passphrase screen. Enter the appropriate passphrase, then tap Done.

15 Installing Symantec Mobile Encryption for ios Installing Symantec Mobile Encryption on Your Device 9 If this is a new account, or if you have an SKM key, your key is synchronized to the server. Once the key is synchronized and downloaded to your device, tap OK. Symantec Mobile Encryption is ready for use. See also About Key Modes (on page 10) Manually Configuring Your Device with a Proxy Server Use manual configuration without the proxy server option if you did not receive a configuration file from your Symantec Mobile Encryption administrator and you do not connect to your Symantec Encryption Management Server through a proxy server. To manually configure Symantec Mobile Encryption 1 After installation, tap the Symantec Mobile Encryption icon on your ios device. 2 On the User License screen, tap Accept. 3 Tap Setup. 4 On the Account screen, in the Server field, enter the fully qualified domain name of your organization's Symantec Encryption Management Server. For example, keys.example.com. You can also enter the IP address, if you have that information. 5 In the User field, enter your user name on your organization's Symantec Encryption Management Server. 6 In the Password field, enter the password for your account. 7 Tap Next. 8 On the Network Settings screen, select Yes and tap Next. 9 In the Proxy Sever field, enter the name or IP address of the proxy server. 10 In the Port field, enter the port number of the proxy server. 11 In the Username field, enter your user name on the proxy server (if required). 12 In the Password field, enter your password on the proxy server (if required). 13 Tap Next. 14 Do one of the following: If you have a pre-existing GKM key, you are prompted to enter the passphrase of the private key on the Passphrase screen. Enter the appropriate passphrase, then tap Done. If this is a new account, or if you have an SKM key, your key is synchronized to the server. Once the key is synchronized and downloaded to your device, tap OK. Symantec Mobile Encryption is ready for use. See also About Key Modes (on page 10)

16 10 Installing Symantec Mobile Encryption for ios Installing Symantec Mobile Encryption on Your Device Automatically Configuring Your Device with a Configuration File Use Automatic Setup if you received a Symantec Mobile Encryption configuration file attached to an message. Note: The configuration file cannot be encrypted as it will not work if it is encrypted. If the configuration file you have is encrypted, contact your administrator and request a decrypted version. To configure Symantec Mobile Encryption using a configuration file 1 Make sure you have a decrypted configuration file on your device. The file could be named, for example, enroll.pgp. 2 Tap and hold the icon for the configuration file on your ios device. 3 Tap Open in Mail Encryptor if it appears. 4 On the User License screen, tap Accept. 5 On the Setup Instructions screen, tap Next. The Symantec Mobile Encryption screen appears with the information from the configuration file in the appropriate fields. 6 Enter your LDAP password (the configuration file never includes passwords), then tap Next. 7 If the configuration file included proxy server settings, the Network Settings screen appears with the proxy server information from the configuration file in the appropriate fields. Enter your proxy server password in the Password field, if required, then tap Next. 8 Do one of the following: If you have a pre-existing GKM key, you are prompted to enter the passphrase of the private key on the Passphrase screen. Enter the appropriate passphrase, then tap Done. If this is a new account, or if you have an SKM key, your key is synchronized to the server. Once the key is synchronized and downloaded to your device, tap OK. Symantec Mobile Encryption for ios is ready for use. See also About Key Modes (on page 10) About Key Modes How you obtain the PGP key that can decrypt your encrypted messages onto your device depends on your key mode: Server Key Mode (SKM). Your key and its passphrase is stored on your Symantec Encryption Management Server. During enrollment, your key is automatically sent to your device.

17 Installing Symantec Mobile Encryption for ios Upgrading from PGP Viewer for ios 11 Guarded Key Mode (GKM). Your key is stored encrypted on your Symantec Encryption Management Server. During enrollment, your key is automatically be sent to your device. When it is downloaded, you are prompted to enter the passphrase. Upgrading from PGP Viewer for ios If you have been using PGP Viewer for ios version 1.x, you can upgrade to Symantec Mobile Encryption for ios without having to uninstall your current app. Settings and any keys stored locally on your device are saved for use with Symantec Mobile Encryption. To upgrade from PGP Viewer for ios 1 Download and install the app on your device. See Installing Symantec Mobile Encryption on Your Device (on page 7). 2 Launch the app. 3 On the User License screen, tap Accept. 4 Do one of the following: If you have a pre-existing GKM key, you are prompted to enter the passphrase of the private key on the Authenticating screen. Enter the appropriate passphrase, then tap Done. If this is a new account, or if you have an SKM key, your key is synchronized to the server. Once the key is synchronized and downloaded to your device, tap OK. Symantec Mobile Encryption is ready for use. Re-enrolling to a Symantec Encryption Management Server To change your server settings, you can "reset" the account settings by re-enrolling. Use this option if you need to change the Symantec Encryption Management Server connection information. Tip: You will need to re-enter the account settings. Be sure you have this information (server IP address, your user name, password, and so on) before you begin. To reset the server 1 Open Symantec Mobile Encryption for ios. 2 Tap Settings. 3 Tap Account. 4 Tap Reset Account Settings.

18 12 Installing Symantec Mobile Encryption for ios Uninstalling Symantec Mobile Encryption Uninstalling Symantec Mobile Encryption To uninstall Symantec Mobile Encryption 1 On your ios device, tap and hold the icon for the Symantec Mobile Encryption app. 2 When the apps begin to shake, tap the x of in the circle in the upper left corner of the Symantec Mobile Encryption app icon. 3 Tap Delete when the confirmation dialog appears.

19 3 Using Symantec Mobile Encryption for ios This section provides information on how to use Symantec Mobile Encryption for ios. Note: If you are connecting to a PGP Universal Server version 3.2, you are only able to decrypt messages. To take full advantage of the features of Symantec Mobile Encryption for ios, including encrypted replies, you must be connecting to the latest server (Symantec Encryption Management Server version 3.3) with mobile encryption enabled. Contact your administrator for more information of capabilities you get from this application. In This Chapter About Encrypted Messages About Attachments About Sending Messages Using the Clipboard to Decrypt Text About Keys About Encrypted Messages Symantec Mobile Encryption for ios supports the following message formats: PGP-EML. A newer, standards based format for PGP-encrypted messages. When you receive PGP-EML encrypted messages, you see an attachment in your ios device's app instead of readable text as you normally would. Opening the attachment using Symantec Mobile Encryption for ios displays the decrypted message content and message header. See Opening PGP-EML Messages (on page 14). PGP/MIME. A newer, standards based format for PGP-encrypted messages. When you receive PGP/MIME encrypted and PGP Partitioned text/html encrypted messages, you see attachments in your ios device's app instead of readable text as you normally would. Opening the attachments using Symantec Mobile Encryption for ios displays the decrypted message content. See Opening PGP/MIME and PGP Partitioned text/html Messages (on page 14). PGP Partitioned. An older format for PGP-encrypted messages that comes in two formats: text/plain and text/html. When you receive PGP Partitioned text/plain messages, you see encrypted text instead of readable text. For these types of messages, you must copy the text to the clipboard and then open Symantec Mobile Encryption for ios to decrypt the text on the clipboard and display it. See Opening PGP Partitioned text/plain Messages (on page 15).

20 14 Using Symantec Mobile Encryption for ios About Encrypted Messages Opening PGP-EML Messages When you receive encrypted PGP-EML messages, you see an attachment in your ios device's app instead of readable text. Opening the attachment using Symantec Mobile Encryption for ios displays the decrypted message content. Note: This is not an attachment that you may be used to because it is not a file attached to the text of the message. Instead, it is the text of the message in an attachment. With PGP-EML messages, there is one attachment: Message.pgp. To open PGP-EML messages 1 Open the app on your ios device. 2 Select the message you want to read. 3 Tap the attachment called Message.pgp. 4 Select Open in Mail Encryptor if prompted. Symantec Mobile Encryption for ios opens, decrypts the message, verifies the signature (if enabled), and then displays the message. Opening PGP/MIME and PGP Partitioned text/html Messages When you receive encrypted PGP/MIME and PGP Partitioned text/html messages, you see attachments in your ios device's app instead of readable text. Opening the attachments using Symantec Mobile Encryption for ios displays the decrypted message content. Note: These are not attachments that you may be used to because they are not files attached to the text of the message. Instead, they are the text of the message in an attachment. With PGP/MIME messages, there are two attachments: Version.txt and Message.pgp. You can ignore Version.txt. With PGP Partitioned text/html messages, the attachment is PGPexch.htm.pgp. To open PGP/MIME and PGP Partitioned text/html messages 1 Open the app on your ios device. 2 Select the message you want to read. 3 Do one of the following: Tap the attachment called Message.pgp (for a PGP/MIME message). Tap the attachment with a file name PGPexch.htm.pgp or PGPexch.rtf.pgp (for a PGP Partitioned text/html message). 4 Select Open in Mail Encryptor if prompted. Symantec Mobile Encryption for ios opens, decrypts the message, verifies the signature (if enabled), and then displays the message.

21 Using Symantec Mobile Encryption for ios About Attachments 15 Opening PGP Partitioned text/plain Messages When you receive a PGP Partitioned text/plain message, you see encrypted text where you would normally see the body of the message. To read the message, copy the encrypted text and use Symantec Mobile Encryption for ios to decrypt the message. To open PGP Partitioned text/plain messages 1 Open the app on your ios device. 2 Open the PGP Partitioned text/plain message you want to read. 3 Select and copy the encrypted text, starting with ----BEGIN PGP MESSAGE--- and ending with -----END PGP MESSAGE---- (be sure to copy all of the beginning and ending tags). 4 Open Symantec Mobile Encryption for ios. 5 Tap Decrypt Clipboard. Symantec Mobile Encryption for ios displays the message. Verifying Signatures Symantec Mobile Encryption can check the validity of (verify) the signatures of PGP-encrypted messages you receive that have been signed. By default, signature verification is on. You can turn off signature verification, which can speed up the display of decrypted messages. Signature verification displays: The date and time the message was signed. The name and address on the key that signed the message. The key ID of the key that signed the message. The encoding format of the key at the time the message was signed. If the message shows "(L)" after the key ID, the encoding was PGP Partitioned; if it shows nothing after the key ID, the encoding was PGP/MIME or PGP-EML. To verify a signature 1 Open and decrypt the message with Symantec Mobile Encryption. 2 Tap Signature in the tool bar. Signature information appears. About Attachments When an encrypted message with an attachment is sent to you, both the body of the message and the attachment are encrypted. When the message is decrypted by Symantec Mobile Encryption for ios, the attachment is also decrypted.

22 16 Using Symantec Mobile Encryption for ios About Attachments Note: While Symantec Mobile Encryption for ios can decrypt an attachment, it may not be viewable on your ios device, depending on the kind of file it is. There are two kinds of attachments that impact your encrypted messages with Symantec Mobile Encryption for ios: Regular attachments, are files that are attached to an message. When encryption is not involved, these are the only kind of attachments associated with messages. Body attachments, are files created during the encryption process. Their content is the body of the encrypted message, not a separate file attached to an message. These attachments are needed so that none of the binary content of these messages is lost in the encryption/decryption process. Symantec Mobile Encryption handles both regular and body attachments based on the format of the message: PGP/MIME messages always display at least two attachments when viewed on a mobile device: Version.txt and Message.pgp. Version.txt includes no useful information. The encrypted body of the PGP/MIME message is stored in the file named Message.pgp. Any actual attachments to the message do not display until Message.pgp is decrypted, at which point they can be accessed as you normally would. PGP Partitioned text/plain messages always display encrypted text in the body of the message. PGP Partitioned text/plain messages have no body attachments. Any actual attachments are shown below the encrypted text and can be opened independently of the encrypted body of the message. Actual attachments are named Attachment1.pgp, Attachment2.pgp, and so on. To decrypt the body of PGP Partitioned text/plain messages, copy the encrypted text to the clipboard, and open Symantec Mobile Encryption for ios, and tap Decrypt Clipboard. PGP Partitioned text/html messages are similar to PGP Partitioned text/plain messages in that encrypted text is shown in the body of the message and actual attachments are shown at the end of the message and are named Attachment1.pgp, Attachment2.pgp, and so on. However, the body of the message is also in a body attachment at the end of the message and can be opened without copying it to the clipboard (it can also be opened by copying it to the clipboard). The body attachments of Partitioned text/html messages are named either PGPexch.htm.pgp or PGPexch.rtf.pgp. The easiest way to determine if an attachment to an encrypted message is an actual attachment or a body attachment is to look at its file name. If the file name begins with Attachment," then it is an actual attachment. See Opening Attachments (on page 16). Opening Attachments To open an attachment to a PGP-EML or PGP/MIME encrypted message 1 Open the message using Symantec Mobile Encryption. The message is decrypted and then displayed. 2 On the Symantec Mobile Encryption for ios toolbar, tap Attachments. The file names of the attachments display.

23 Using Symantec Mobile Encryption for ios About Sending Messages 17 3 Tap the name of the attachment to see what options are available for opening it on your ios device. To open an attachment to a Partitioned message 1 Open the message in your app. 2 Switch to attachments screen (move to the bottom of the message) and look for the attachments. They are named Attachment1.pgp, Attachment2.pgp, and so on. If you are opening an attachment to a Partitioned text/html message, be sure to select an actual attachment and not the body of the message in an attachment. 3 Tap the attachment, then select Open in Mail Encryptor when this text appears. Symantec Mobile Encryption for ios opens, decrypts the attachment, and displays the Attachments screen. 4 Tap the name of the attachment to see what options are available for opening it on your ios device. About Sending Messages Use this version of Symantec Mobile Encryption for ios to reply to encrypted messages, send new encrypted messages, or forward encrypted messages. You can add or remove recipients, save a draft of your message, and send your message using Symantec Encryption Management Server and Symantec Universal Web Messenger. See also Sending New Encrypted Messages (on page 18) Replying to Messages (on page 17) Forwarding Messages (on page 18) Replying to Messages To reply to encrypted messages 1 From the decrypted message viewer of Symantec Mobile Encryption for ios, tap the Reply icon as you normally do in your mail app. 2 If necessary, add recipients in the To or Cc fields. When you add additional recipients: Recipients whose keys can be found are in blue "bubbles." Messages sent to those recipients are sent secured. Recipients whose keys cannot be found are in grey "bubbles." Messages sent those recipients cannot be secured. 3 When you are finished typing your reply, tap the icon to encrypt the text. Symantec Mobile Encryption for ios automatically selects the correct encoding format for your recipients. Depending on the encoding format, the app attaches Message.pgp file to the body as an attachment.

24 18 Using Symantec Mobile Encryption for ios About Sending Messages 4 Tap Send. The is sent. See also How Messages are Processed if Keys are Not Found (on page 19) Sending New Encrypted Messages To send new encrypted messages, you must first open Symantec Mobile Encryption for ios. You cannot send a new encrypted message directly from your mail app. To send new encrypted messages 1 Open Symantec Mobile Encryption for ios. 2 Tap New Message. 3 Address it to a recipient(s) for whom you have a key. Continue to add additional recipients in the To or Cc fields. When you add additional recipients: Recipients whose keys can be found are in blue "bubbles." Messages sent to those recipients are sent secured. Recipients whose keys cannot be found are in grey "bubbles." Messages sent those recipients cannot be secured. 4 Add text in the Subject and body of the . 5 When you are finished typing your reply, tap the icon to encrypt the text. Symantec Mobile Encryption for ios automatically selects the correct encoding format for your recipients. Depending on the encoding format, the app attaches Message.pgp file to the body as an attachment. 6 Tap Send. See also How Messages are Processed if Keys are Not Found (on page 19) Forwarding Messages When forwarding an encrypted message, do the following: 1 From the decrypted message viewer of Symantec Mobile Encryption for ios, tap the Forward icon as you normally do in your mail app. 2 Add additional recipients in the To or Cc fields. When you add additional recipients: Recipients whose keys can be found are in blue "bubbles." Messages sent to those recipients are sent secured. Recipients whose keys cannot be found are in grey "bubbles." Messages sent those recipients cannot be secured. Note: If you are forwarding a message which has attachments, you are prompted if you want to include the attachments in the forwarded message.

25 Using Symantec Mobile Encryption for ios About Sending Messages 19 3 When you are finished typing your reply, tap the icon to encrypt the text. Symantec Mobile Encryption for ios automatically selects the correct encoding format for your recipients. Depending on the encoding format, the app attaches Message.pgp file to the body as an attachment. 4 Tap Send. The is sent. See also How Messages are Processed if Keys are Not Found (on page 19) How Messages are Processed if Keys are Not Found Messages are processed depending on the mail policy on your Symantec Encryption Management Server. If your Symantec Encryption Management Server policy is to block messages if any recipient's key is not found, a message is displayed. Remove that recipient's address to proceed. If your Symantec Encryption Management Server policy is to send messages in the clear if any recipient's key is not found, a message is displayed. This message is informational only. Viewing Sent Messages Encrypted messages that you send are saved in the Sent folder of your mail app. Messages are encrypted to your key as they are saved in your Sent folder. To view sent messages 1 Open the Sent folder of your mail app. 2 Open the mail message. 3 To view the encrypted message, tap the Message.pgp attachment and select Open in Mail Encryptor. The message is decrypted to your key and displayed in Symantec Mobile Encryption for ios. Working with Saved Draft Messages When you are composing a secure message and you leave Symantec Mobile Encryption for ios, the app automatically saves an encrypted copy of the draft . The next time you launch Symantec Mobile Encryption for ios, the draft is automatically decrypted and you can continue to compose and send your encrypted message.

26 20 Using Symantec Mobile Encryption for ios Using the Clipboard to Decrypt Text Using the Clipboard to Decrypt Text If you have a message that you cannot decrypt you can copy the text and decrypt the text on the Clipboard. For example, if you opened an message that did not include the encrypted message as an attachment but instead displayed it as ciphertext, you can copy the encrypted text, starting with ----BEGIN PGP MESSAGE---- and ending with -----END PGP MESSAGE---- (be sure to copy all of the beginning and ending tags), and then decrypt the text. To decrypt text on the Clipboard 1 Open Symantec Mobile Encryption for ios. 2 Tap Decrypt Clipboard. The message is decrypted. About Keys With Symantec Mobile Encryption for ios, you can store locally on your device the public portion of the keys for people with whom you communicate often. Internal users' keys are stored on your Symantec Encryption Management Server keyserver and are looked up on an as-needed basis and then cached for 24 hours, but if the key is stored on your device, processing the mail is faster because that key lookup step is eliminated. External users' keys can also be imported and stored on your ios device. To store keys locally, you must import them to your ios device. You can also view, and delete, keys from your device. See also Importing Keys (on page 20) Viewing or Deleting Users' Keys (on page 21) Importing Keys You can import another person's public key onto the keyring on your ios device. Having the public key present on your device means that Symantec Mobile Encryption for ios does not need to contact your Symantec Encryption Management Server or another keyserver to search for keys when sending encrypted messages. Request that the person with whom you are exchanging encrypted messages send you the public portion of their key in an message, as an attachment. Tip: Be sure that the key is a valid key that can be used for encryption. To import a key 1 In the message you received, tap the attachment (with the.asc file name). 2 When Mail Encryptor have imported the key, tap OK on the confirmation message.

27 Using Symantec Mobile Encryption for ios About Keys 21 Viewing or Deleting Users' Keys A list of keys that are available on your device can be viewed. In addition, you can delete keys from your device. To view a list of keys on the device 1 Open Symantec Mobile Encryption for ios. 2 Tap Settings. 3 In the Settings screen, tap Keys. To remove a user's key 1 While viewing the list of keys, swipe the user's key you want to remove. 2 When Delete appears, tap the button to confirm you want to remove the key.

28

29 4 Settings This section provides information on how to clear passphrase cache, update server settings, turn on or off signature verification, and turn on or off message signing. In This Chapter Clearing Caches Working with Server Settings Turning Signature Verification On or Off Turning Message Signing On or Off Viewing the Help, License, or Version Information Clearing Caches You can clear the passphrase cache for additional security. When you select this option, you are prompted to enter your passphrase the next time it is required. This option also clears the cache for recipient keys. To clear the caches 1 Open Symantec Mobile Encryption for ios. 2 Tap Clear Cache. 3 Tap Clear Caches. Working with Server Settings On the Account page, you can view the following server settings: Encryption: Shows the currently configured Symantec Encryption Management Server. Proxy: Shows the currently configured proxy server (if any). Secondary: Shows the secondary key server, if configured. To change your server settings, you can "reset" the account settings by re-enrolling. Use this option if you need to change the Symantec Encryption Management Server connection information. For more information, see Re-enrolling to a Symantec Encryption Management Server (on page 11).

30 24 Settings Turning Signature Verification On or Off Retrieving the Latest Policy from the Server You can manually update and retrieve the latest policy from the Symantec Encryption Management Server. To update policy 1 Open Symantec Mobile Encryption for ios. 2 Tap Settings. 3 Tap Account. 4 Tap Update Policy. Turning Signature Verification On or Off Signature verification of incoming secured messages is turned on by default. Signature verification requires that the message sender s public key be available. If it is not available locally, it is retrieved from the Symantec Encryption Management Server, which can be a potentially lengthy process. To speed up message decryption, you can turn off signature verification. To change the signature verification setting 1 Open Symantec Mobile Encryption for ios. 2 Tap Settings. 3 In the Settings screen, do one of the following: To turn off signature verification, slide the option for Signature Verification to OFF. To turn on signature verification, slide the option for Signature Verification to ON. 4 Tap the Home icon to accept your changes, exit the Settings, and return to the Main Menu. Turning Message Signing On or Off Signing your encrypted messages is turned on by default. To change the message signing setting 1 Open Symantec Mobile Encryption for ios. 2 Tap Settings. 3 In the Settings screen, do one of the following:

31 Settings Viewing the Help, License, or Version Information 25 To turn off signature verification, slide the option for Message Signing to OFF. To turn on signature verification, slide the option for Message Signing to ON. 4 Tap the Home icon to accept your changes, exit the Settings, and return to the Main Menu. Viewing the Help, License, or Version Information View the license agreement or version information from the Settings screen. To view additional information 1 Open Symantec Mobile Encryption for ios. 2 Do one of the following: To view the on-device user assistance, tap Help. To view the license or version information, tap Settings.