Bug Report: Installation of Symantec Encryption Desktop MP10 causes machine to not boot MacBook 12" 8,1 Early 2015
Last Updated February 18, 2016
There have been instances where Symantec Drive Encryption has been installed on a MacBook 12" 8,1 Early 2015 system and the system will no longer boot after doing so.
This system has been observed to have 4k sector size blocks, which is not currently a supported technology for Symantec Drive Encryption. As a result, Symantec Drive Encryption cannot be used on these systems. Other features included with Symantec Encryption Desktop, such as File Encryption, Email Encryption or Virtual Disk can still be used with some workarounds listed in this article.
Note: From Symantec Encryption Desktop version 10.3.2 Maintenance Pack 12, now when you install Symantec Encryption Desktop on systems running a Mac OS X operating system that have a 4k sector drive, a message informs you that the Symantec Encryption Desktop Drive Encryption component will not be installed. However, all the other components of Symantec Encryption Desktop will be installed on these systems.
To check if the system is 4k, run the following Command:
diskutil info / | grep "Block Size"
If the value returned is: 4096, this indicates the drive is using 4k sector size blocks and Symantec Drive Encryption will not work.
If the return is Device Block size: 512, Drive Encryption can then be used.
If other features are needed as part of Symantec Encryption Desktop, such as Email Encryption, Virtual Disk or individual File Encryption, a workaround exists to prevent this issue.
NOTE: Before attempting these steps, please ensure current backups are up to date and that information needed on the system is copied to the backups.
Scenario 1 - Preventing the Issue During Installation of Symantec Encryption Desktop:
In this scenario, all other features, such as File Encryption, Email Encryption, or Virtual Disk will be included in the installation process. Only Symantec Drive Encryption is excluded from being used.
1. Mount the disk image used for installation of Symantec Encryption Desktop so that "Encryption Desktop.pkg" is listed and right-click on this and select "Show Package Contents"
2. Open the "Packages" folder, which will include two packages, "PGP Desktop.pkg", and "PGPwde.pkg".
3. Double-click on only "PGP Desktop.pkg" and walk through the on-screen instructions to complete the installation. Symantec Drive Encryption will not be installed, but all other features will be included.
Scenario 2 - Symantec Drive Encryption has been installed, but the system has not been rebooted: