I need a solution
Hi
We are planning to install PGP desktop E-mail with a non-mailstream placement and an internal PGP Universal server in SKM.
How can we manage IOS Mobile devices? As far as I can see, the devices need access to a universal server in the dmz to sync private and public keys.
That universal server also needs ldap access to Active Directory to authenticate.
Is it normal best practise to place a Universal server in DMZ that also holds Private keys? What is the risk?
A DMZ environment should not have access to LDAP internally, so I guess we need two universal servers where the internal and dmz server replicate data and LDAP is enabled only on the internal universal server?
Does anyone have experience with such design?
Torb