Forgive me - I know that this may not be the most appropriate forum, considering my issue involves Symantec PGP/SED, but this is where the experts are.
My company (regretfully) chose to use Symantec PGP Whole Disk Encryption (now know as Symantec Encryption Desktop) to encrypt our laptops. Symantec provided great information on creating a boot image with PGP drivers, but it doesn't work well for in-place refreshes. My refresh task sequence leverages USMT to capture data, then restarts to WinPE. Before restarting, the TS runs a command which tells the machine to skip the PGP preboot authentication, but even after skipping that, once the boot image loads the TS fails because TSenv.dat was stored on the encrypted disk. There is a command I can issue to get access to the encrypted disk, but at that particular stage in the task sequence I don't have a way to issue the command before the TS engine goes looking for the environment file.