Queries regarding Symantec PGP Universal Server and WDE

I am using Symantec PGP Encryption Management Server 3.3.2 MP11 and Symantec Encryption Desktop 10.3.2 MP11 for Whole Disk Encryption on clients. I have two queries that i would like to ask:

1) Can we add admin users who can access the encrypted machines for maintenance?

2) What is the policy setup that will allow us to to apply updates and bypass pre-boot for that time? 

Thanks.