This article describes how to create and use PGP Virtual Disks as a disk or as a folder with PGP Desktop 10 for Windows.

A PGP Virtual Disk is an area of space, on any disk connected to your computer, which is set aside and encrypted. PGP Virtual Disks are much like a bank vault, and are very useful for protecting sensitive files while the rest of your computer is unlocked for work.

A PGP Virtual Disk looks and acts like an additional hard disk, although it is actually a single file that can reside on any of your computer disks. It provides storage space for your files you can even install applications, or save files to a PGP Virtual Disk but it can also be locked at any time without affecting other parts of your computer. When you need to use the applications or files that are stored on a PGP Virtual Disk, you can unlock the disk and make the files accessible again.

Create a PGP Virtual Disk to be Mounted as a Drive Letter

To create a PGP Virtual Disk to mount as a drive letter:

1. Open PGP Desktop.
2. Click the PGP Disk control box on the left pane of the PGP Desktop main screen, then click New Virtual Disk. Alternatively, select File > New > PGP Virtual Disk. The New Virtual Disk screen is displayed in the right pane of the screen.
3. In the Name field, type the name that you would like for the new PGP Virtual Disk.
4. In the Disk File Location field, accept the default location for the PGP Virtual Disk volume you are creating, or click Browse to specify another location.
5. From the Mount as menu, select the drive letter that you would like for the new PGP Virtual Disk.

You can:

• Accept the drive letter that PGP Desktop suggests for you.
• From the Mount as menu, select an available drive from the list.

6. Select Mount at startup to have your new PGP Virtual Disk volume mount at startup automatically. When selected, you are prompted for your PGP Virtual Disk passphrase when you start your computer.
7. Select Unmount when inactive for... to have the PGP Virtual Disk unmount if you have not used your computer for a specific time interval that you specify (in minutes). This is helpful if you often leave your computer unattended. This enables an additional safeguard that locks your PGP Virtual Disk if you forget to.
8. From the Capacity menu, select the desired type of PGP Virtual Disk. Your choices are:

• Dynamic (resizable). This type of disk grows in capacity as files are added to it, yet it stays small until the additional space is needed. PGP Desktop manages this process, you only need to set the maximum size that you would like the disk to be. You can also compress this disk later, if you choose.
• Fixed size. This type of disk remains the same size, regardless of how many files are added to it.

9. From the Capacity menu, set the size (in the case of Dynamic disks, the maximum size) for your new PGP Virtual Disk. Use whole numbers; no decimal places. Choose KB (kilobytes), MB (megabytes), or GB (gigabytes) from the menu.
   
   The maximum allowable size for a PGP Virtual Disk depends on the size and format of your hard disk.
   
   
10. Specify a file system format for the volume:

11. Specify the encryption algorithm you want to use to protect your data:

• AES (256 bits). AES (Advanced Encryption Standard) is a block cipher that can be used at 128, 192, or 256 bits. The more secure 256-bit version is used for creating PGP Virtual Disk volumes by default.
• CAST5 (128 bits). CAST is a 128-bit block cipher. CAST is a strong, military-grade encryption algorithm that has a solid reputation for its ability to withstand unauthorized access.
• Twofish (256 bits). Twofish is a 256-bit block cipher, symmetric algorithm. It was one of five algorithms that the U.S. National Institute of Standards and Technology (NIST) considered for the AES (Rijndael was selected).

12. You must have at least one user who can access your new PGP Virtual Disk. In the User Access section, specify who you want to give access to, and what method they use for access:

User Key - To add users who authenticate with public-key cryptography:

• Click Add User Key. The Add Key Users box is displayed, displaying the keypairs currently on your keyring.
• From the Add Key Users box, select the key users you want by double-clicking the listing. Alternatively, you can drag the listing from the left side to the right, or select a listing and click Add. Click OK when you are finished.

Passphrase User - To add users who authenticate with a passphrase:

• Click New Passphrase User. The Create New User dialog box is displayed.
• For each new passphrase user, type a name for that user, type a passphrase for them, then type the passphrase again to confirm. Click OK to create the passphrase user. If you want to authorize more passphrase users, repeat the process.
• To modify the passphrase for a passphrase user, select that user, then click Change Passphrase.

13. Click Create to start creating the new PGP Virtual Disk. A progress bar indicates how much of the PGP Virtual Disk has been initialized and formatted. When complete, your new PGP Virtual Disk is displayed in the PGP Disk control area.
14. The first user you create is granted administrator status, and there can only be one administrator at a time. However, you can grant administrator status to any of your other users, regardless of whether they are public key or passphrase users. Click their name in the User Access list, then click Make Admin.
15. Delete any user, other than the Administrator, by selecting their name and clicking Delete User. To delete the Administrator, first grant administrator status to another user, then delete the former administrator.

Create a PGP Virtual Disk to be Mounted as an NTFS Folder

To create a PGP Virtual Disk to mount as an NTFS folder, do the following:

1. Open PGP Desktop.
2. Click the PGP Disk control box on the left pane of the PGP Desktop main screen, then click New Virtual Disk. Alternatively, select File > New > PGP Virtual Disk. The New Virtual Disk screen is displayed in the right pane of the screen.
3. In the Name field, type the name that you would like for the new PGP Virtual Disk.
4. In the Disk File Location field, accept the default location for the PGP Virtual Disk volume you are creating, or click Browse to specify another location.
5. From the Mount as menu, select Folder for the new PGP Virtual Disk.
6. Enter a location for your PGP Virtual Disk or select Browse.
7. Select Mount at Startup to have your new PGP Virtual Disk volume mount at startup automatically. When selected, you are prompted for your PGP Virtual Disk passphrase when you start your computer.
8. Select Unmount when inactive for... to have the PGP Virtual Disk unmount if you have not used your computer for a specific time interval that you specify (in minutes). This is helpful if you often leave your computer unattended. This enables an additional safeguard that locks your PGP Virtual Disk if you forget to.
9. From the Capacity menu, select the desired type of PGP Virtual Disk. Your choices are:

• Dynamic (resizable). This type of disk grows in capacity as files are added to it, yet it stays small until the additional space is needed. PGP Desktop manages this process, you only need to set the maximum size that you would like the disk to be. You can also compress this disk later, if you choose.
• Fixed size. This type of disk remains the same size, regardless of how many files are added to it.

10. From the Capacity menu, set the size (in the case of Dynamic disks, the maximum size) for your new PGP Virtual Disk. Use whole numbers; no decimal places. Choose KB (kilobytes), MB (megabytes), or GB (gigabytes) from the menu.
    
    The maximum allowable size for a PGP Virtual Disk depends on the size and format of your hard disk.
    
    
11. Specify a file system format for the volume:

12. Specify the encryption algorithm you want to use to protect your data:

• AES (256 bits). AES (Advanced Encryption Standard) is a block cipher that can be used at 128, 192, or 256 bits. The more secure 256-bit version is used for creating PGP Virtual Disk volumes by default.
• CAST5 (128 bits). CAST is a 128-bit block cipher. CAST is a strong, military-grade encryption algorithm that has a solid reputation for its ability to withstand unauthorized access.
• Twofish (256 bits). Twofish is a 256-bit block cipher, symmetric algorithm. It was one of five algorithms that the U.S. National Institute of Standards and Technology (NIST) considered for the AES (Rijndael was selected).

13. You must have at least one user who can access your new PGP Virtual Disk. In the User Access section, specify who you want to give access to, and what method they use for access:

User Key - To add users who authenticate with public-key cryptography:

• Click Add User Key. The Add Key Users box is displayed, displaying the keypairs currently on your keyring.
• From the Add Key Users box, select the key users you want by double-clicking the listing. Alternatively, you can drag the listing from the left side to the right, or select a listing and click Add. Click OK when you are finished.

Passphrase User - To add users who authenticate with a passphrase:

• Click New Passphrase User. The Create New User dialog box is displayed.
• For each new passphrase user, type a name for that user, type a passphrase for them, then type the passphrase again to confirm. Click OK to create the passphrase user. If you want to authorize more passphrase users, repeat the process.
• To modify the passphrase for a passphrase user, select that user, then click Change Passphrase.

14. Click Create to start creating the new PGP Virtual Disk. A progress bar indicates how much of the PGP Virtual Disk has been initialized and formatted. When complete, your new PGP Virtual Disk is displayed in the PGP Disk control area.
15. The first user you create is granted administrator status, and there can only be one administrator at a time. However, you can grant administrator status to any of your other users, regardless of whether they are public key or passphrase users. Click their name in the User Access list, then click Make Admin.
16. Delete any user, other than the Administrator, by selecting their name and clicking Delete User. To delete the Administrator, first grant administrator status to another user, then delete the former administrator.

180237 - HOW TO: Create PGP Virtual Disks - PGP Desktop 10 for macOS (Symantec Encryption Desktop)