Posted 18.02.2020 by admin

Question About Sophos Safeguard For Mac

Macs running Mac OSX 10.10 (Yosemite) or greater are eligible for this service. Computer encryption for Macs is provided by FileVault2. Sophos SafeGuard is installed and stores a copy of the FileVault recovery key on a secure central server.

Changes to your computer with FileVault Encryption Once your computer has been encrypted with FileVault, you may notice some minor changes to the way things look on your computer. Power On Authentication (POA) Login Screen Once a Mac has been encrypted you'll notice that you log in right when your computer starts up, this is the power on authentication:. Power on the Mac. The POA login window displays (looks similar to the regular login window but the background picture will appear blurry) and lists the users who are authorized to unlock the computer encryption and start the computer.

The authorized user enters their password and hits 'enter'. Note: An authorized user is the account that encrypted the computer originally. If your computer was setup by SDS this is automatically handled for you. If you notice your account is unavailable, you will need an administrator to add your account manually following the directions below. OS X will then start and log on the authorized user. Not all user logins are avaiable (Authorized User Account) If you attempt to login but cannot find your user account when accessing a computer, it may be that your account isn't an authorized user.

You can authorize additional users to power on the Mac. This requires an administrator account and the user to be added must enter their password.

To allow additional users to power on the Mac:. Go to System Preferences Security & Privacy FileVault tab. Click the lock in the bottom left corner and enter an administrator's username and password. Click on the Enable Users. Button. Select a user to add from the list and click the Enable User.

Button next to the user name. The selected user must then enter their password.

The user is now able to log in after powering on the computer 'Enable Users.' In FileVault options in system preferences Alternative Method - Adding Additional Users (Only with FileVault Managed by Sophos SafeGuard) If you have the Sophos SafeGuard preferences pane visible in System Preferences (pictured below) then there's another method that does not require the credentials of the original encrypting user to add another. However, it does require that at least one person has logged into the computer that was authorized to boot it. Add an additional user via Sophos SafeGuard Prompt:. Log the current user out.

Log in with user account to be added. While loading, a pop-up window will ask for your login password. Once entered, that user can now boot and login to the computer as an authorized user.

If you're not prompted, please go to the Sophos SafeGuard system preference (pictured below). Click the 'Server' tab and select 'Synchronize'. A pop-up window will show up asking for your login password Still can't add additional users? Get some help Please submit a ticket to mentioning encryption and 'Add FileVault Authorized Users'. Recovery Process If you forget your OS X logon password, proceed as follows:.

Turn on your Mac. In the logon screen click on '?' (Alternatively, enter a wrong logon password three times.) Your password hint is displayed and you are asked if you want to reset your password using your recovery key. If you still do not remember your password, click the (?) icon next to the text. Contact your local support technician or email to receive a recovery key. Enter the recovery key. The Mac starts and you are asked to enter a new password and a password hint.

Start the recovery process on a Mac at the POA login window To get the prompt for your recovery key. Click the question mark within the text bar. If it is not visible, try incorrectly entering your password.

Sophos Safeguard Enterprise

How to confirm Sophos SafeGuard is installed Click the apple icon on the top-left of your computer and select 'System Preferences.' You will see the 'Sophos Encryption' on the bottom row. You can use this prefences option to check on the status of your encryption and it can be used for troubleshooting.

Pop-up windows you may see on your computer after enabling encryption SSL Error - The SafeGuard software checks in with the campus’ SafeGuard server every 90 minutes. If for some reason it can’t connect to the server securely it will display this window or something like it. This error can appear if you have an out-of-date certificate in your keychain. Please submit a ticket to mentioning encryption and 'SSL error'.

Enable encryption or enroll an additional user - You will see a window like this if the computer is just being encrypted or you've logged into an account that has not been authorized to boot the computer. Please enter your credentials that you use to login to the computer. This is safe.

Missing FileVault Recovery Key - You will see a pop-up like this on the top-right of your screen if your computer has been encrypted but doesn't have a valid recovery key on our server. Please submit a ticket to mentioning encryption and 'No Valid Recovery Key'. Failed to activate encryption on Mac - After entering your password to turn on FileVault encryption through the Sophos SafeGuard prompt, you receive the error 'Failed to activate encryption.' Before submitting a help ticket, please check available for any relating to 'SafeGuard' and accept it. Please read the BigFix Offer instructions before accepting as your computer may need to restart.

Please submit a ticket to mentioning encryption and 'failed to activate encryption error on Mac'.

The Windows Client Patch 1804 addresses some security issues with SafeGuard Enterprise Client 7.0, 7.0.1, and 7.0.2 for Windows 10, which theoretically could be used to obtain local privilege escalations. For more information, refer to.

Question About Sophos Safeguard For Machine

Additionally the following issues have been fixed:. Various hotfixes for SafeGuard file filter driver.

Compatibility issue with current version of Sophos Endpoint Security Note that this patch can be used for all SafeGuard Enterprise Client 7.0 Releases (7.0, 7.0.1, 7.0.2). We recommend that you install the latest Windows security patches on your clients before installing the SafeGuard client security patch. For clients running Windows 7, you must install all Windows security patches first. For a complete list and more details, see.

No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording or otherwise unless you are either a valid licensee where the documentation can be reproduced in accordance with the license terms or you otherwise have the prior permission in writing of the copyright owner. Sophos, Sophos Anti-Virus and SafeGuard are registered trademarks of Sophos Limited, Sophos Group and Utimaco Safeware AG, as applicable. All other product and company names mentioned are trademarks or registered trademarks of their respective owners.

You find copyright information on third party suppliers in the Disclaimer and Copyright for 3rd Party Software document in your product directory.