Sophos Update Manager (SUM) Password

Hi Christian,

Would that mean I don't have to do the certificate backup/import?

Thanks,

Jerry

Hello Jerry,

the certificates give the management server a unique identity in terms of RMS (the communication system between clients and server) and clients get their certificates when registering with a management server for the first time - kinda mutual assurance they belong to the same pack :smileyhappy:.

The certificate export/import is not rocket science - DataBackupRestore does the backup and you just import the CertificationManager.reg into the registry before installing SEC. Then it will have the right smell for the existing clients.

Christian

Hi Christian,

Where do I find the "- DataBackupRestore" you mentioned?

Thanks,

Jerry

Hello Jerry,

\Program Files (x86)\Sophos\Enterprise Console :smileyhappy: (see also How to use the DataBackupRestore.exe ...)

Christian

Hi Christian,

I am going from a 32 to 64bit machine. Does that make a difference?

Thanks,

Jerry

Hello Jerry,

from a 32 to 64bit machine

as noted in the migration guide you have to adjust the registry keys (i.e. edit the .reg file) before importing them.

Christian

Hi Christian,

I opened the file. Do I change this in the top of the file?:

[HKEY_LOCAL_MACHINE\SOFTWARE\sophos\Certification Manager\CertAuthStore]

To this:

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\sophos\Certification]

or this:

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\sophos\Certification\CertAuthStore]

Thank you,

Jerry

Hello Jerry,

the only key you need is [HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\Certification Manager\CertAuthStore], you can delete the rest. Insert \Wow6432Node between SOFTWARE and \Sophos so that it reads: [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Sophos\Certification Manager\CertAuthStore]

Looks like you are not very familiar with .reg files. If you are unsure where a key starts and ends simply replace all occurrences of SOFTWARE\Sophos with SOFTWARE\Wow6432Node\Sophos.

Christian

Hi Christian,

You are correct, I don't. Can I import this anytime before installing? Do I still run the DataBackupRestore.exe to get the certificate?

Thanks,

Jerry

Hello Jerry,

anytime but before installing :smileyhappy:. You run DataBackupRestore -Action=backup on the old server (or alternatively export just the CertAuthStore key with regedit.exe) but not on the new one.

Christian