In the Sophos Central console, if the device is encrypted under the Base Encryption Policy, what's the best way to uninstall Sophos on it?

Question

Hello, 
 In the Sophos Central console, if the device is encrypted under the Base Encryption Policy, what's the best way to uninstall Sophos on it? 
 
 I have a Mac which needs uninstallation of Sophos Central endpoint, but is also encrypted by FileVault2. What's the best procedure to uninstall Sophos on it?

Gowtham Mani · Answer

Hi G33k , 
 A user with administrative rights on a Mac can turn off FileVault and decryption will start. However, if a policy is assigned to a logged in user, encryption will start again after decryption is completed. So make sure to remove the user from the assigned policy before you decrypt and uninstall the safeguard client.