Trouble scheduling a batch script that uses Symantec PGP to decrypt a file

[Mike Wezesa]

I have an application user that is trying to schedule a file decrypt job remotely using Tidal. The job is running against the agent that the batch file exists on which simply looks like this:

@BigR off
E: 
cd E:\Concur_JE\Decrypt
pgp --decrypt extract_CES_SAE_v2_p0005476awcg_*.txt.pgp --passphrase password
exit

When the batch script is called via command line on the system that the Tidal agent resides on, the script runs just fine and decrypts the file as expected. However, when triggering the same batch script via Tidal job (Tidal 6.2.0) it comes back with the following error message which seems to indicate that it cannot find the pgp keyring (Symantec PGP):

pgp:open keyrings (1001:could not open keyrings, file not found)

Completed at 08/04/2015 03:41 PM

I've tried multiple different runtime and interactive users to run the job, however the same output persists...Any ideas?

[Derrick Au]

Hi Mike,

When running script via command what account is used?

When running script from Tidal, what is the runtime user?

Are they both the same? runtime user may not be permissioned correctly or have access to your key rings. If it is not a permissioning issue, perhaps try to explicitly specify the pathname for PGP,

ie SET PGPPATH=C:\PGP

BR,

Derrick Au

[rosaho]

This discussion has been reposted from Additional Communities to the Tidal Enterprise Scheduler community.

[mcholland1]

Mike,

I have a very similar issue except I am not getting the error. Tidal completes successfully, except it doesn't actually do anything with the files. If I run the script from the agent's server, no problem. Run it as a bat file, no problem. Run it from Tidal and I get nothing. I also posted about this on Symantec's support and put in a ticket with them but received no help.

Did you ever solve this issue?

- MC

[Mike Wezesa]

I needed to add --home-dir "C:\PGP\PGPhomedir" to the script itself for it to run properly as a job scheduled via Tidal.

[mcholland1]

OK thanks. I did that already and still nothing. Like I said, Tidal said it completes normally but it doesn't actually decrypt anything. I looked at this for months and have had zero luck.

[rocketscientist1]

this is why I use PGP on linux for encryption/decryption tasks.  Native OS tools and eliminates the complexities of introducing Third party software into the mix.  Good luck getting any love from Symantec on this :-)