For SecureZIP customers

The latest version of SecureZIP

SecureZIP’s newest version is called PK Protect Endpoint Manager, and the software is free to you. Instead of setting up encryption on every machine, you set the rules once in one place and they apply to everyone.

The short answers

01The upgrade is free

No software charge. Implementation services are quoted separately.

02Nothing breaks

Your encrypted files stay accessible and nothing needs to be re-encrypted.

03Your users won’t notice

No downtime and no change to how anyone works day to day.

FAQ

What people usually ask

01What is PK Protect Endpoint Manager?

The current generation of SecureZIP. Same encryption engine you run today, with central administration on top: one console where an administrator sets policy and pushes it to every agent, instead of each user deciding file by file.

02Do I have to upgrade?

No. SecureZIP keeps working and stays supported. This is available whenever it suits you, and your account team can walk through it at whatever pace you want.

03What do we get that we don’t have today?
  • Central policy control. Set encryption rules once, tailor them by group or action, update them from one place.
  • Automatic encryption. Files landing in a designated folder are encrypted without anyone having to remember.
  • SmartKeys. Keys created and managed for you, with no separate key infrastructure to run. Community keys tie a key to an Active Directory group, so anyone in that group encrypts and decrypts seamlessly and nobody handles a password. Move someone to another department and they lose the ability to decrypt, even if nobody touched their file permissions.
  • An encryption audit log. A record of what was encrypted and when.
  • Post-quantum encryption. PK Protect supports post-quantum algorithms. As the standards change, you update your policy once in the console instead of touching every machine.
04What does it cost?

No software charge for the equivalent encryption capability. Implementation services are quoted separately, and your account team will scope that with you.

05What’s involved?

Five steps, at your pace:

  1. Stand up the admin console, including SSO access for administrators.
  2. Deploy to a small group of users and monitor.
  3. Roll out to everyone.
  4. Configure your automated encryption policies.
  5. Retire SecureZIP when you’re ready, or leave it where it is.

PKWARE helps with the console setup and the rollout, and both run side by side for as long as you want.

06Will my users notice?

No downtime, and no change to how they work day to day. Once automatic encryption policies are in place there are fewer manual steps than they have today, not more.

07Do I have to uninstall SecureZIP first?

No. Both run side by side, and you decide whether to retire SecureZIP at all.

08What happens to files we already encrypted with SecureZIP?

They stay accessible, and nothing needs to be re-encrypted. PK Protect opens them the same way you do now, automatically or on demand.

09We run SecureZIP through scripts and automated jobs, not from people’s desktops. What about us?

The move doesn’t change how your jobs run. PK Protect has both an agent and a command line, so your scripts, jobs, and schedules carry over as they are.

10My environment can’t take a central admin console. What are my options?

The console can be hosted by PKWARE, so there’s no infrastructure for you to stand up and nothing new to run. If that still doesn’t fit your environment, tell your PKWARE contact and we’ll work the problem with you.

11I use Policy Manager. Does anything change for me specifically?

You already have an administrator managing central policy, so this is the closest match to how your team works today.

12I bought SecureZIP through a partner or reseller. What should I do?

Contact PKWARE directly and we’ll talk through the upgrade to PK Protect with you. When you’re ready to move forward, we’ll run the paperwork through your preferred reseller.

What else it does

Worth knowing

The same deployment can find sensitive data across your endpoints, cloud storage, and Microsoft 365, classify it under one policy, and act on it: encrypt, mask, redact, quarantine, or delete. Protection stays on the file after it moves.

01 DiscoverScan every surface and find the data you didn’t know you had.
02 ClassifyLabel what’s sensitive, automatically and consistently.
Protect, in parallel
EncryptIn place and in motion.
MaskUsable data, zero exposure.
RedactStrip sensitive fields.
Quarantine/DeleteIsolate or purge on policy.
AuditProve protection was applied, to any regulator.

None of this is part of the upgrade and nothing switches on by itself. It’s a separately licensed add-on, and your account team can show you what it turns up in your environment before you decide anything.

Still have a question?

Ask it. Reply to the person who sent you this, or contact us directly.

Contact PKWARE support