Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SGN 5.50 policy editor challenge wizard not working!

Help!

I created a standalone policy in 5.40 some time ago. The policy was fairly bland basically encrypt hard drive, windows authentication (not using PBA) and pretty much everything else default. Been using this for a whilewithout any real issues.

Bought a new laptop which is a Core-i5 processor which 5.40 doesn't support so waited and it looks like 5.50 seems ok on it. When I installed 5.50, I installed the pre-install package and the SGNClient.msi package, rebooted to check that 5.50 comes up ok which it now does. Once rebooted, I installed the policy package I'd created in 5.40. This went on fine and the machine immediately ecrypted it's HD - perfect! I saved my key files safely away on a network drive.

Since it was some time ago I created the original policy, I loaded on the new policy editor onto another machine and started to have a play at creating a new policy. The original 5.40 policy configuration was lost some time ago but since we run standalone, didn't really matter to me. I only needed the policy editor to create the original standalone package.

Clicking menus, I thought then I'd try the new recovery wizard in the new 5.50 policy editor so I went to my shiny new laptop, put in a rubbish password 16 times and locked out. I rebooted and on the laptop, I got the locked screen and the challenge button which I pressed, obtained my challenge key. I started up the recovery wizard and immediately was asked for a security key file which I pointed at the file I created earlier on the new laptop and immediately, the recovery wizard said 'invalid key file'. Oh dear!

So there you have it, I've a really nice new book end on my desk now which was a lovely new laptop. Once locked out, it appears you're stuffed and I now start the long task of reinstalling from scratch. I think there's someting not right with the new policy editor/recovery wizard. Anyone else tried this :o)

Matt

:2602


This thread was automatically locked due to age.
Parents
  • Hi Matt

    Thanks for the speedy response, I thought this one dead and forgotten!

    I actually do still have the original device I created the policy with; and the original policy, and have tried using that setup to generate the Response code - with the same result unfortunately.

    I have also tried the Recovery CD option but despite being able to rebuild the MBR and the boot sectors successfully it still fails as dependent upon the generation of a Response code...

    I was hoping for an alternative to recalling all the installed laptops for rebuilding, by maybe a simple fix on the XML file, but will speak to Sophos as you suggest.

    Best

    Dave

    :15041
Reply
  • Hi Matt

    Thanks for the speedy response, I thought this one dead and forgotten!

    I actually do still have the original device I created the policy with; and the original policy, and have tried using that setup to generate the Response code - with the same result unfortunately.

    I have also tried the Recovery CD option but despite being able to rebuild the MBR and the boot sectors successfully it still fails as dependent upon the generation of a Response code...

    I was hoping for an alternative to recalling all the installed laptops for rebuilding, by maybe a simple fix on the XML file, but will speak to Sophos as you suggest.

    Best

    Dave

    :15041
Children
No Data