Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 11 replies
  • Subscribers 1 subscriber
  • Views 20930 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Problem reinstalling Sophos Management Server...

Terry_S

Hi,

I had a few issues recently during a sophos migration from one server to another. Long story short, I've uninstalled the Sophos Management Server portion as per a KB Article and when I go to reinstall the component, I get prompted to import the Existing master security officer certificate. We've never actually used Safeguard (which I assume this is for), and I don't get a prompt beforehand to choose whether to use encryption like before. I assume there is a settings or registry key that thinks safeguard is installed, any ideas where I can find this ?

Thanks

Terry

:46691


This thread was automatically locked due to age.
Parents
  • 0

    Hello Terry,

    I get prompted to import the Existing MSO certificate

    and the installer doesn't let you proceed, right?

    I don't get a prompt beforehand to choose whether to use encryption like before

    You replied with Do not manage encryption then? I don't think so.

    While I didn't recreate the reinstall scenario I've tried to find out (don't say I have too much time on my hands) what Setup.exe might check and how it behaves. Consider a full migration - you install the database first, then import some keys (not related to encryption) and then run the Server and Console installs. Chapter 9 is a little bit vague in saying a) Accept the defaults wherever possible and e) If you have the license and been using Sophos Encryption [...] you will be prompted  for the master security officer certificate. You indeed get the prompt because the defaults assume Encryption/Existing installations. But - you get two prompts before that. As far as I could find out you do not get the prompt when they key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FE6997C4C29E1E499172405689E2B61 exists. If it's indeed there then why it is left behind after an uninstall I don't know.     

    Christian

    :46699
Reply
  • 0

    Hello Terry,

    I get prompted to import the Existing MSO certificate

    and the installer doesn't let you proceed, right?

    I don't get a prompt beforehand to choose whether to use encryption like before

    You replied with Do not manage encryption then? I don't think so.

    While I didn't recreate the reinstall scenario I've tried to find out (don't say I have too much time on my hands) what Setup.exe might check and how it behaves. Consider a full migration - you install the database first, then import some keys (not related to encryption) and then run the Server and Console installs. Chapter 9 is a little bit vague in saying a) Accept the defaults wherever possible and e) If you have the license and been using Sophos Encryption [...] you will be prompted  for the master security officer certificate. You indeed get the prompt because the defaults assume Encryption/Existing installations. But - you get two prompts before that. As far as I could find out you do not get the prompt when they key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FE6997C4C29E1E499172405689E2B61 exists. If it's indeed there then why it is left behind after an uninstall I don't know.     

    Christian

    :46699
Children
No Data
Cookie Information Banner