Current Customers: Contact PKWARE® Product Support online or call +1.937.847.2687 (8:00 a.m. - 5:00 p.m. CT).
All other inquires should be directed to your regional sales representative: http://www.pkware.com/contact

Server FAQ
- Latest Version
- What is new in version 12.5?
- (Windows only) Include open files in ZIP archives. The OpenFile option allows you to include files in memory in archives.
- Extract WavPack files within ZIP archives. Open audio files compressed with this algorithm.
- Extract files from archives created on IBM z/OS using hardware compression tools. PKZIP Server can extract these files without special hardware.
- Improved support for PPMd compression algorithm on 64-bit Windows No need to run 32-bit version of this algorithm.
- Changes in FIPS Mode. With FIPS mode selected, files must be signed with the SHA-256 algorithm (or higher). Also will not extract files encrypted with 112-bit (two-key) 3DES. These algorithms are still available outside FIPS mode.
- (Windows only) Include open files in ZIP archives. The OpenFile option allows you to include files in memory in archives.
- Compatibility
-
Does PKZIP/SecureZIP run on my favorite UNIX®?
PKZIP/SecureZIP is supported only on Solaris 8.0 and later, HP-UX 11i and later, AIX 5.2 or later. The Solaris version will only run on UltraSPARC processors. The HP-UX version will run on PA-RISC or Itanium processors. No other UNIX operating systems or hardware platforms are supported at this time. Specifically, PKZIP/SecureZIP is not available for Solaris for x86, SCO UNIX, UNIXWare, Tru64 or NCR UNIX.
-
Does PKZIP/SecureZIP run on my favorite Linux?
PKZIP/SecureZIP is supported on RedHat Enterprise Linux 4 or above and SUSE Linux Enterprise 9 or above. The Linux version will only run on x86 processors.
-
Does PKZIP/SecureZIP run on my favorite Windows® Server?
PKZIP/SecureZIP is supported on Windows 7 (32- and 64-bit), Windows Server 2008 (32- and 64-bit), Windows Server 2008 R2 (32- and 64-bit), Windows Server 2003 (32- and 64-bit), Windows Server 2003 R2 (32- and 64-bit), and Windows 2000 Server w/SP4.
- Basics of Zipping and Unzipping
-
What file formats can PKZIP/SecureZIP extract?
ZIP (including files with the .zipx extension), TAR, RAR, Gzip, Bzip2, JAR (Java Archive), UUencode, XXencode, BinHex, ARJ, Z, and LHA/LZH. On Windows, CAB files can also be extracted. PKZIP/SecureZIP provides the same interface for extracting from all of these archive types.
-
What file formats can PKZIP/SecureZIP create?
ZIP, TAR, Gzip, Bzip2, UUencode, and XXencode.
-
When I try to run PKZIP/SecureZIP from a script or in the background, it hangs and never finishes. Why?
PKZIP/SecureZIP tries to change the settings of your terminal. When it runs in the background, PKZIP is not able to change the settings, and waits until it can. Using the -silent option will change that behavior, as well as suppress all output. Please read Appendix E of the User’s Manual, for more hints and tips on running PKZIP/SecureZIP in the background or from a script.
-
If I'm using the -silent option, how do I know if there were any problems creating the .ZIP file?
PKZIP/SecureZIP returns a value to the shell to indicate error status. On UNIX or Linux, one normally checks this by checking the value of $? immediately after running the command. If $? is 0, then everything was all right. On Windows, one checks the “errorlevel”. If the errorlevel is set to 0, then everything was all right. Please read Appendix B of the User’s Manual for more information.
-
When does PKZIP/SecureZIP Server create temporary files? Can someone who accesses my temporary file read my data?
There are several operations for which PKZIP/SecureZIP creates temporary files:
- Updating an archive: When you update an archive, PKZIP/SecureZIP first creates and updates a temporary copy of the archive. When the update is completed, the original archive is replaced with the updated copy. Data in the temporary file is encrypted if it was encrypted in the archive you are updating. Similarly with new or updated files for the archive: they are encrypted in the temporary file if they are to be encrypted in the updated archive.
-
Creating a spanned archive: A temporary file is created to span an archive in segments across multiple discs or other media. Data in the temporary file is encrypted if it is to be encrypted in the final archive.
-
Extracting an embedded archive: An archive can be embedded in another archive. For example, a ZIP file can contain another ZIP file, or a GZIP archive can contain a TAR archive. The embedded option can be used to extract the files in an embedded archive file directly instead of first extracting the embedded archive itself. In this case, the embedded archive is extracted into a temporary file before its files are extracted. The data in the temporary file is encrypted only if the archive is encrypted. Example1: if outside.zip contains inside.zip, the data in the temporary file is encrypted only if it was encrypted in inside.zip. Example2: if outside.zip contains inside.tar, the data in the temp file is NOT encrypted, as TAR doesn't allow for encryption.
-
Creating streamed archives: When you write an archive to a data stream—for example, to STDOUT (see chapter 3 of the Users Manual for the Server or Command Line products—PKZIP compresses and (if encryption is specified) encrypts the data before writing it to the temporary file. The temporary file is needed to get size information for local headers, which are written out before file data. But the data is already compressed and encrypted when it’s placed in the temporary file; it never appears on disk unencrypted.
- Security and Digital Certificates
-
Why does my new digital certificate signed using SHA2 appear as invalid or not trusted when using SecureZIP?
There is a documented issue with using certificates signed using SHA2 if you are using Microsoft Windows 2003 R2 or a 64-bit version of Windows XP. You will need to obtain and apply a Hotfix from Microsoft to resolve this problem. Additional information on this issue is available directly from Microsoft using the following URL, http://support.microsoft.com/default.aspx?scid=kb;EN-US;938397. PartnerLink customers providing new Software Distribution Packages (SDP) to their partners should inform them to obtain and apply this Hotfix from Microsoft if they will be using SHA2-signed certificates on the affected platforms.
-
I forgot the password for my .zip file(s). What do I do?
Your files are only as secure as your password, but that can be a problem sometimes. It is important to make your passphrase easy for you to remember, but hard for anyone else to guess. PKZIP/SecureZIP does not store an archive's passphrase anywhere but inside the file. PKWARE has no special means for “getting around” the encryption and is not able to assist in the recovery of an encrypted file.
-
Why am I asked for a password when I am using my digital certificate to sign or decrypt my .zip file(s).
There are several reasons you may be asked to enter a password even though you are using a digital certificate. One reason is that your digital certificate may be protected with “two-factor” authentication. One form of “two-factor” authentication uses a password you define to control use of your certificate. This means that in order to use your certificates private key for signing or decrypting, software applications such as PKZIP/SecureZIP can only use it if you grant access to your private key. Providing your password when prompted grants PKZIP/SecureZIP access to use your private key. If you are using a password to protect the private key for your digital certificate, make sure you remember this password just as you would if you were using a password to encrypt a .zip file without a digital certificate.
Another reason you may be asked for a password is that your private key is not available. To open a .zip file using your digital certificate, your private key must be available on the machine where you are working.
-
I need to replace or repair my computer that is running PKZIP/SecureZIP. How do I make sure I can still open .zip files I have encrypted using my digital certificate?
Your digital certificate resides on the computer where you use it to encrypt and decrypt your .zip files. To ensure you are able to use your certificate after replacing or repairing your computer, you must make sure you have a protected backup of your digital certificate, including your certificate’s private key. On UNIX and Linux make sure you include your “certificates.db” files with your routine system backup steps. You can also use the PKCertTool utility to export your certificate in UNIX/Linux. See "The PKCertTool export Command" in Chapter 6 of the User Manual for more information. On Windows, use the Certificate Export Wizard in Windows Internet Options to export your digital certificate. Be sure to export your private key.
-
Can I sign archives with a digital certificate located on a Lightweight Directory Access Protocol (LDAP) server?
No. Both the certificate and private key must be installed to your local system.
-
Can I encrypt archives with a digital certificate located on a Lightweight Directory Access Protocol (LDAP) server?
Only SecureZIP Enterprise supports using LDAP digital certificates to encrypt archives. See "Accessing Recipients in an LDAP Directory" in Chapter 3 of the Users Manual for more information.
- Legacy Applications
-
I currently use PKZIP/SecureZIP Server for Windows Server Standard Edition. I don’t see this available for purchase any longer from PKWARE. What product do I use if I want to update to a newer version?
PKZIP/SecureZIP Windows Server Standard Edition is no longer offered by PKWARE. We recommend that you use PKZIP/SecureZIP Windows Server Enterprise Edition. If you were using Standard Edition on Windows Desktop, and need command line capabilities, you may also try PKZIP/SecureZIP Command Line Interface.
Press Room
Twitter
FIS Success Story
Global financial firm stakes reputation on world class data center - ensures security and controls across a diverse partner network with PKWARE.