• OpenPGP Support Create and extract files using the RFC4880 OpenPGP format.
• Time stamp Support Added support for digital time stamping of signed ZIP files.
• FastAES Support New FastAES feature will take advantage of processors that support AES-NI encryption instruction.
• More extraction formats Added support for extracting additional formats including 7-Zip files and CD/DVD Data Image formats.
• Zone Identifier Support New ability to preserve Zone identifier security information for downloaded files.
• Alternate Stream Support Added support to add and extract NTFS alternate streams.

PKZIP/SecureZIP V14 is supported on Windows XP SP3 and higher.

We have fully tested SecureZIP and PKZIP v11 and 12.x on Windows Vista and v12.4 and later on Windows 7. and both programs are fully compatible and supported.

When installing or using earlier versions of PKZIP/SecureZIP on Vista or Windows 7, be aware of the following known limitations:

• You may need to log in as Administrator to install the application.
• File associations for ZIP and other file types may need to be set as an administrative user.
• You may need to resize the column widths for certificate lists displayed on the passphrase/recipient selection dialog.
• Dialogs may not display full graphics capabilities under Windows Aero.
• You will be unable to use the diskette format and wiping feature of PKZIP/SecureZIP.

Yes. PKWARE products are tightly integrated with Microsoft Office to provide compression and encryption of email messages and attachments. PKWARE products are typically able to auto-detect Microsoft Outlook to install the appropriate options.

You likely have a document or spreadsheet created with Office 2007 or later. These Office files have the .docx or .xslx extension, and are zipped XML files. SecureZIP will attempt to "unzip" the file, and generate the error. Right click on the file and choose Open With… to open the file in the appropriate Office application.

You likely have a document or spreadsheet created with Office 2007. You will need to reinstall the Office 2007 Compatibility Pack. See http://support.microsoft.com/kb/924074 for more information.

You will see this message from a number of applications you may run if you have not configured third party application DLL's as trusted. This dialog is automatically displayed by Outlook in order to better protect systems from the spread of e-mail-bourne viruses. Microsoft has implemented this protection to prevent unauthorized access to your address book. This dialog may appear on systems running Outlook 2003, Outlook 2002 and Outlook 2000 with SP2. It is reported most commonly on Outlook 2002/XP with SP3. It can also appear on versions of Outlook earlier than 2000 and on Windows 98 if you have installed the Outlook E-mail Security Update.

When this dialog appears, it is to inform you that an application program is trying to access your address book. You must confirm this access is allowed in order for the application to proceed. You can configure your system to trust applications you use frequently to avoid repeatedly seeing this dialog for those applications authorized to run on your machine.

This dialog may appear when using SecureZIP within Outlook to encrypt and send message attachments if you have not configured SecureZIP as a trusted application. To establish SecureZIP as a trusted application, you must configure the PKWARE Outlook integration DLL PKOutAdd.DLL within your Outlook Security Settings folder.

Microsoft provides detailed instructions for establishing the Outlook Security Settings folder. Please reference the Microsoft Knowledge Base article OL2000: Administrator Information About the Outlook E-mail Security Update (http://support.microsoft.com/?kbid=263297) for information on administering your Outlook security settings.

This indicates the PKWARE Software Publisher Certificate used to sign the installation package has expired. To ensure the integrity of all software delivered to customers, PKWARE digitally signs all installers to provide assurance that they come from PKWARE and can be trusted. This message indicates the certificate use by PKWARE has expired. This expiration means that PKWARE’s current certificate will no longer be used to sign new software packages we provide in the future. It does not mean there is any problem with the installer you received, and the signature it contains remains valid. PKWARE is already using a new certificate for new installers. Please note - this notice does not prevent the software from installing, and DOES NOT impact the operation of the software. Affected installers of our current products for v12.51 have been updated to use PKWARE’s current certificate.

To view a detailed explanation of this issue, click here.

PKWARE has identified a compatibility issue that may affect customers using SecureZIP v8.0 and newer that have also installed a Microsoft Security Patch for Outlook 2003 (KB2293428).

Customers installing a Microsoft security patch for an Outlook 2003 issue that is described in Microsoft Security Bulletin MS10-064 may experience problems automatically sending encrypted messages using SecureZIP’s Outlook integration feature. Further, some customers may experience messages sent without encryption.

Microsoft has documented information about this Outlook 2003 security issue in the Knowledge Base article found here: http://support.microsoft.com/kb/2293428. A problem has been acknowledged by Microsoft with this patch and has indicated it affects multiple vendors, including PKWARE. Specific information on the problem resulting from installing the KB2293428 patch is outlined in a subsequent Knowledge Base article referenced as KB2445403. Customers are advised to contact Microsoft Product Support referencing KB2445403 for additional information and availability of a cumulative patch. Information on how this compatibility issue may affect SecureZIP use and details on a documented work-around is available from PKWARE at http://www.pkware.com/documents/Eloqua/TechnicalAdvisoryOutlook2003Patch.pdf. Customers applying a cumulative Outlook 2003 patch for KB2445403 from Microsoft do not need to consider this work-around. Please contact PKWARE Product Support for information or assistance with this problem. You can contact us on the web at http://www.pkware.com/support/desktop.

There are several ways to create a .ZIP file in PKZIP or SecureZIP, including:

• Using the “Create New Archive” wizard;
• Using the “drag and drop” method;
• Using the “Add Files” dialog; or
• Using the right-click context menu on one or more selected files in Windows Explorer.

All of these methods are explained in the help section on zipping files.

The simplest way to compress a folder and all its subfolders is to select the folder in Windows Explorer and drag it into the main PKZIP window. Alternatively, you can zip folders and subfolders from the Add Files dialog. In the Compression Options dialog, first set the options Include subfolders and Save folder name: Relative path. See the help section for information on other settings you can make in the Compression Options dialog.

There are several ways to extract a file from a .ZIP in PKZIP, including:

• Using the “Extract from Archive” wizard;
• Double-clicking on an archive;
• Using the PKZIP “Open” dialog; or
• Using the right-click context menu on a selected file in Windows Explorer.

You can add multiple files to an archive in all the same ways that you add single files, including:

• Using the “Create New Archive” wizard or the “Update Existing Archive” wizard;
• Using the “drag and drop” method;
• Using the “Add Files” dialog; or
• Using the right-click context menu on one or more selected files in Windows Explorer.

There are two ways to have PKZIP add files from multiple folders in a single operation:

• In the “Add Files” dialog, build a list of files selected from different folders. You select files to add to a list in the same way that you select files to add to an archive; but, when you add files from a list, PKZIP waits until the list is complete and then adds all the files in one operation. See the help topic: Add Files from a List.

• Turn off “Auto-Save” and add files with drag and drop. The Auto-Save feature will save an archive automatically anytime you change the archive’s contents by adding or deleting files. When the feature is turned on (as it is by default), you do not need to manually save an archive each time after you change it. If you want to make several changes to an archive — for example, add several different sets of selected files — you can turn off Auto-Save so that PKZIP runs in delay-save mode. To turn off Auto-Save, right-click an empty area in the middle of the PKZIP main window and uncheck Auto-Save in the context menu. When Auto-Save is turned off, PKZIP creates an internal list of any changes you specify, but does not make the changes until you manually save the archive (or turn Auto-Save back on). Until then, PKZIP highlights names of files that you add, update, or delete in boldface and flags the files with special icons. When you save the archive, all of your changes are made in one operation.

PKZIP and SecureZIP v12.5 allows you to define a three-letter extension for your ZIP archives, either as a default (in Mail Options) or in individual email messages. See the help topic: Using Alternate ZIP Extensions.

WinZip is not a PKWARE product. PKWARE invented and continues to innovate and evolve the standard for ZIP data compression. Similarly, we invented and set the standard for SecureZIP. For more information on PKZIP and SecureZIP for Windows, please visit PKWARE Products.

If you have a virus scanning program, and you turn on virus scanning in PKZIP or SecureZIP, your virus scanner will scan for viruses in the folders to which you have just extracted files. You can configure and turn on virus scanning from the Virus Scan tab of Security Options.

You can also have PKZIP/SecureZIP scan the files in an archive for viruses. (Again, you must first have configured a virus scanner.) To scan an archive for viruses, open the archive and choose “Virus Scan” from the Actions menu (using the Conventional interface), or go to the Extraction tab and check the "Scan for Viruses..." box. PKZIP extracts the files to a temporary location, launches your configured virus scanner to scan them, and deletes the temporary files afterward.

A split archive is a .ZIP file that is broken into smaller segments. A split archive is useful if you plan to place the file onto removable media later or want to send a large archive as an email attachment and your mail system has restrictions on the size of attachments.

You can split an archive when you save it. In the Save As dialog, set the Split size control to the size segment that you want.

If you do not want to use SecureZIP to zip attachments in Outlook, click the ZIP files toolbar button in the new message window so that the button is not selected. Alternatively, you can single-click the SecureZIP tool tray icon. An “x” will appear on the icon to indicate that SecureZIP Attachments is disabled.

When the product asks for your license key, enter the serial number from the confirmation email you received when you purchased the software. You can also find that key in your packing slip (if you received a physical copy) or in the Online Store Help section.

The license for PKSFX is good only for the Windows Desktop graphical interface. You cannot create self-extracting archives from the Windows command line interface. If you need to create self-extracting archives on the command line, consider PKZIP or SecureZIP for Windows Server.

Currently PKZIP and SecureZIP has been tested with over 500,000 files in a single archive and our total file size limit to compress is 18 petabytes.

There are several operations for which PKZIP and SecureZIP creates temporary files:

• Opening and editing archived files without first extracting them: When you double-click a file in an archive to open it in its associated application, SecureZIP creates a temporary copy of the archived file for you to work on. This file is uncompressed and unencrypted while you are working on it.
• Updating an archive: When you update an archive, SecureZIP first creates and updates a temporary copy of the archive. When the update is completed, the original archive is replaced with the updated copy. Data in the temporary file is encrypted if it was encrypted in the archive you are updating. Similarly with new or updated files for the archive: they are encrypted in the temporary file if they are to be encrypted in the updated archive.
• Creating a spanned archive: A temporary file is created to span an archive in segments across multiple discs or other media. Data in the temporary file is encrypted if it is to be encrypted in the final archive.

There is a documented issue with using certificates signed using SHA2 if you are using Microsoft Windows 2003 R2 or a 64-bit version of Windows XP. You will need to obtain and apply a Hotfix from Microsoft to resolve this problem. Additional information on this issue is available directly from Microsoft using the following URL, http://support.microsoft.com/default.aspx?scid=kb;EN-US;938397. PartnerLink customers providing new Software Distribution Packages (SDP) to their partners should inform them to obtain and apply this Hotfix from Microsoft if they will be using SHA2-signed certificates on the affected platforms.

A digital certificate identifies you to others when you are sending or receiving encrypted or digitally signed ZIP files. A digital certificate provides an alternative to using a passphrase when securing data. Using a passphrase is easy, but it is difficult to safely exchange a passphrase, and even more difficult to remember it over time. Digital certificates provide stronger protection and eliminate difficulties associated with using a passphrase to send files securely across the Internet.

A digital certificate consists of a private key and a public key. Your private key is something which you hold securely and use to decrypt ZIP files or to digitally sign ZIP files for authentication purposes. Your public key is given to others that need to encrypt ZIP files that you are allowed to open. When you send a file encrypted with your digital certificate (using your private key), the recipient can only open the files if they provide the public key that corresponds to the digital certificate used for encryption. View the SecureZIP tutorial for more information on using digital certificates.

A Comodo/PKWARE digital certificate is valid for one year from the date you received it. Each year, you should renew your certificate to ensure the integrity of the certificate you use. Each year a new certificate is issued to you as a means of confirming you remain the authorized user of the certificate issued in your name. This provides assurances to those people receiving signed ZIP files from you that you are who you say you are.

Approximately two weeks before your certificate expires, SecureZIP will display a reminder prompt informing you that the certificate you are using is about to expire. SecureZIP will report this for your SecureZIP certificate as well as for certificates you may have received from other vendors.

If your certificate is from a vendor other than PKWARE, contact that vendor for instructions on how to renew that certificate. If your certificate is issued from PKWARE, then the renewal process is as follows: At this time, your SecureZIP certificate can be renewed at no cost. In addition to the SecureZIP reminder notice, you will also receive an email from PKWARE Certificate Services. To ensure you receive this email, we suggest you do not block incoming messages from PKWARE. This email will provide instructions on how to start your certificate renewal.

• The email you receive will prompt you to select the “Get a Digital Certificate” option from the SecureZIP Help menu. (This option is normally disabled, but is automatically enabled when it is time to renew your SecureZIP certificate. We suggest you do not choose this option until you have received the renewal notification from PKWARE Certificate Services.)
• Once you have selected to get a new digital certificate, the PKWARE certificate delivery system will be activated to issue a new certificate for your email address. Note: If you choose the “Get a Digital Certificate” option before you receive your email renewal notice, you may receive an error message from SecureZIP that a digital certificate is already issued for your email address.

Yes. In fact, you should retain your expired digital certificate for as long as you anticipate you will need to decrypt data that was encrypted for that certificate. When you receive a new certificate through a renewal process, it will not open data you have encrypted with your expired certificate. You should always retain each certificate to ensure you can always open all of your encrypted ZIP files.

You should make a backup copy of both your old and new digital certificates and store them in a safe place. If you ever lose a certificate, or repair or replace your computer, you will need to restore your certificates from your backup media. SecureZIP cannot recover your digital certificates and PKWARE cannot recover encrypted data if you no longer have your certificate.

Unless you are using an advanced method of digital certificate storage, such as a USB token or a Smart Card, your digital certificates and their corresponding private keys are protected within the Windows Certificate Store located within the Windows registry. Make sure you backup your certificates along with other critical system files you save for recovery purposes. SecureZIP can be used to save each of your certificates to a passphrase protected file which you can then copy to removable media for storage. Click here for information on making a backup copy of your digital certificate using SecureZIP.

The SecureZIP Global Directory is a certificate directory service provided by PKWARE for SecureZIP users. Its purpose is to publish public keys used for encrypting ZIP files you send to other SecureZIP users. The SecureZIP Global Directory is similar to an address book which can be used to look up your public key; this makes it easier for others to send you encrypted ZIP files without requiring you to manually send each person a copy of your public key. When you send a file or message encrypted with a digital certificate to another SecureZIP user, the recipient's copy of SecureZIP will automatically search for public keys in the SecureZIP Global Directory to decrypt the item.

When you receive your SecureZIP digital certificate, a copy of your public key is automatically placed into the SecureZIP Global Directory so you can immediately being to exchange secure ZIP files with others. If you have a digital certificate that you did not receive as a SecureZIP user (one that may be from another certificate provider), you can upload your certificates public key to the SecureZIP Global Directory by visiting http://directory.comodo.com. You should never place more than one certificate for the same email address into the SecureZIP Global Directory. The SecureZIP Global Directory will not accept private keys or certificates from private certificate authorities.

Revoking your certificate ensures that the issuing provider publishes your certificate with a no longer trusted status. This will ensure that if someone other then you has your private key, they cannot successfully impersonate you when sending ZIP files to others. If you received your digital certificate from a source other than SecureZIP, you should immediately contact your certificate authority for instructions on how to have your certificate revoked.

If you received your certificate from SecureZIP, you should immediately contact PKWARE Technical support and inform them that you need to have your certificate revoked. You will need to send an email from the email address for which the certificate was issued and provide them with the email verification code that you received from PKWARE when your certificate was received.

If you are using a purchased copy of SecureZIP, PKWARE will then initiate the revocation process for your certificate. If you are using a free version of SecureZIP, PKWARE will initiate the revocation process, but then ask you to directly contact Comodo, the certificate authority that signs all SecureZIP certificates. You will need to provide them with information about your certificate and email address. PKWARE will provide Comodo’s contact information.

PKWARE solutions utilize strong encryption so there is nothing that can be done if you lose or forget your passphrase. It is important to remember your passphrase as PKWARE has no special means for “getting around” the encryption and may not be able to assist in the recovery of an encrypted file.

To avoid problems with forgetting passphrases, it is recommended that files be encrypted using a digital certificate. A digital certificate provides a digital ID that can be used to encrypt and decrypt files without having to remember a passphrase used for each ZIP file.

This message will appear if you are using versions of SecureZIP prior to v12.51 which created digital certificates having key sizes of 1024 bits. Recent industry best practices recommend moving from certificates of 1024 bits to certificates of 2048 bits. Comodo has implemented support for this new key size for all certificates issued using SecureZIP. In SecureZIP v12.51 PKWARE has updated the certificate wizard to create certificate requests (a CSR) to reflect this change. If you have an older version installed, you will need to upgrade to v12.51 which is located on our website at http://www.pkware.com/support/desktop/updates/ on the 12.5 downloads tab. If you do not have current maintenance that will allow for free upgrades, you can go to our online store to get product and pricing information: http://www.pkware.com/store/securezip/windows/enterprise

SecureZIP has been tested using the National Institute of Standards and Technology (NIST) FDCC test images for Windows XP and Windows Vista. SecureZIP operates correctly on FDCC configured desktops.

SHA-1 is scheduled to be deprecated by NIST as FIPS-compatible after 2010. SecureZIP v12.5 in FIPS mode will not sign files or central directories using the SHA-1 hashing algorithm.

Yes, existing certificates using the SHA-1 algorithm will be valid until they expire.

SecureZIP in FIPS mode will not sign any files or central directories on Windows 2000 or early versions of Windows XP. There are no FIPS-compatible hashing algorithms for Windows operating systems older than Windows XP with Service Pack 3.

NIST is also scheduled to deprecate 3DES-112 (also known as “two key” 3DES) after 2010. SecureZIP with FIPS mode turned on will not extract files encrypted with this algorithm. By default, SecureZIP uses the FIPS 140-compliant AES-256 algorithm.

SecureZIP has been tested using the National Institute of Standards and Technology (NIST) FDCC test images for Windows XP and Windows Vista. SecureZIP operates correctly on FDCC configured desktops.

Your computer manufacturer can tell you whether the processor is 32-bit or 64-bit. The System page in your Windows Control Panel should also tell you. This page can also help you identify the type of Windows operating system you have:

http://support.microsoft.com/kb/827218

If you are using a 64-bit version of Windows, we recommend installing the 64-bit version of PKZIP/SecureZIP (in version 12.4 and later) to make the most effective use of your Windows environment.

SecureZIP v12.3 included a 64-bit Explorer shell integration module. To complete the setup for 64-bit Explorer integration, after installing SecureZIP v12.3, run the "Install 64-bit Explorer Integration" option from the SecureZIP entry on the Windows Start menu.

SecureZIP versions 12.2 and earlier operate on 64-bit versions of Windows, but they do not integrate into the 64-bit version of the Windows Explorer. Run the 32-bit Explorer for this integration by selecting Run from the Windows Start menu. Enter %systemroot%\syswow64\explorer into the Open box and choose OK.

SecureZIP v12.4 is the first release for 64-bit Windows. The 64-bit SecureZIP installer should uninstall any existing installation of SecureZIP v12.3 or earlier before installing v12.4. If you have already installed the 32-bit v12.3, you will need to uninstall the 64-bit Explorer Integration application manually before installing SecureZIP v12.4.

Yes you can, however, the convenience of PKZIP/SecureZIP integration with the default Windows command line shell will not be available. If you are using a 64-bit version of Windows, we recommend installing the 64-bit version of PKZIP/SecureZIP to make the most effective use of your Windows environment.

No, 64-bit PKZIP/SecureZIP will only install and run on a 64-bit version of Windows.

Yes, PKZIP/SecureZIP v12.5 Office Integration will work with both 32-bit and 64-bit Office applications.

You can create PKSFX files using the 64-bit versions of PKZIP/SecureZIP for Windows Desktop, however, only 32-bit PKSFX files are provided at this time. This ensures that PKSFX files you create will run on the widest range of target systems.

SecureZIP v12.4 and later includes support for creating and opening ZIP files using the LZMA compression algorithm.

SecureZIP v12.4 and later includes support for creating and opening ZIP files using the PPMd compression algorithm.

SecureZIP v12.5 includes support for opening ZIP files using the WavPack compression algorithm.

Thank you for your interest in SecureZIP Express. PKWARE offers our customers high quality products to help serve security and compression needs. SecureZIP Express has successfully provided a means for users to obtain the advanced security available through personal digital certificates and SecureZIP. We have discontinued the limited-time offer of SecureZIP Express as we focus on new initiatives in providing interoperable, easy-to-use security solutions.

Yes, you may continue to use your installed copy of SecureZIP Express for as long as you choose.

Yes, you can continue to use your free digital certificate with SecureZIP Express or SecureZIP until your certificate expires. Each digital certificate is valid for one year from the date it was issued. As long as you keep a copy of your digital certificate and its private key, you can open any files encrypted using it for as long as you choose, even if your certificate has expired. You must make a backup of your digital certificate. If it is lost or needs to be restored, PKWARE does not have a copy and cannot replace your certificate.

PKWARE renewed free digital certificates issued using SecureZIP Express until the end of December 2009. You may obtain a new digital certificate from another certificate provider. VeriSign, Comodo, and Thawte provide certificates compatible with SecureZIP.

Support for re-installing SecureZIP Express was discontinued at the end of December, 2009.

If you are interested in a free ZIP utility for decrypting and decompressing ZIP archives you may consider our free ZIP Reader product by clicking here.

Alternatively, if you would like the benefits of a full, licensed copy of SecureZIP, we encourage you to try the 30-day free Evaluation of SecureZIP for Windows Desktop by clicking here.

SecureZIP v12.4 and later Office Integration does not support compressing or encrypting files with Outlook Express or Windows Mail, as Microsoft has discontinued these products.

Below is a screen shot of how the program may look, this is caused by a bad installation or a previous version not being removed properly. To correct this issue, go through Add/Remove programs and remove SecureZIP for Windows. After removing the program, make sure all folders and files are deleted. Then REBOOT the machine and re-install SecureZIP.

All file times will remain true to the Operating System; there will be no effect to our product based on DST.