HOW TO: Create a configuration file for the Symantec Mobile Encryption for iOS Mail Encryptor app
Last Updated May 06, 2015
Prior to the release of the Symantec Mobile Encryption for iOS Mail Encryptor app, iOS users were able to decrypt messages using the PGP Viewer for iOS. Symantec Mobile Encryption for iOS Mail Encryptor app has replaced the PGP Viewer for iOS.
A configuration file for the Symantec Mobile Encryption for iOS Mail Encryptor app includes connection information about your SEMS (Symantec Encryption Management Server) or PGP Universal Server and any proxy servers you are using.
By using a configuration file, Mail Encryptor app users will only need to enter their LDAP and proxy server passwords.
The configuration file needs to be opened by the Mail Encryptor app so it should be given a *.pgp extension, eg, enroll.pgp.
The fields in the configuration file are:
pgpStamp: The fully qualified domain name or IP address of the SEMS.
LDAPUserName: The user's LDAP username, eg, their Active Directory username.
useProxyServer: Enable/disable this value depending if your Encryptor app users connect to the SEMS via a proxy server.
proxyServerHostname: The fully qualified domain name or IP address of the proxy server.
proxyServerPort: The port number to use on the proxy server.
proxyServerUsername: The username of the Encryptor app user on the proxy server.
To create a PGP Viewer iOS configuration file:
Open a text editor such as Mac OS X TextEditor Windows Notepad.
Copy and paste the example below into the text editor.
Edit the following fields to match your SEMS and network configuration and save the file with a .pgp extension, eg, enroll.pgp, john_smith.pgp:
pgpstamp - The hostname or IP Address for the SEMS, eg, keys.example.com or 192.168.1.2.
LDAPUserName - The LDAP name for the user, eg, john_smith
useProxyServer - Set the value to <true> if using a proxy server or <false> if not using a proxy server.
proxyServerHostname - If using a proxy server, type the name or IP address of the server.
proxyServerPort - The port number to use on the proxy server if required.
proxyServerUsername – The username for the user on the proxy server if needed.
Once you have prepared the configuration file do the following:
Email the file as an attachment to the user and open the attachment on the iOS device.
When the iOS user opens the attachment, enrollment will begin using pre-populated information.
Note that if the user is already enrolled then before opening the attachment they will first need to reset their current details by clicking on Settings / Account / Reset Account Settings.
Attached is a sample configuration file. Replace all
values with the appropriate values for your environment.