After installation of a new client configuration package including a CCO file (Company Certificate Change Order file), a SafeGuard client local cache corruption occurs and the client is shut down. It appears as if the company certificate has not been correctly changed.
First seen in
Sophos Disk Encryption 5.61.0
Beta Endpoint Security and Control 10.0 (encryption)
After installation of the client configuration package including a CCO file (Company Certificate Change Order file), a Sophos Disk Encryption client local cache corruption occurs before the machine has been restarted for the first time.
Due to the fact that local cache backups are only being created after a successful system start, an older backup will be restored upon the next restart, restoring the old company certificate and rendering the client configuration package installation including the CCO file useless.
What To Do
A new client configuration package including the CCO file (Company Certificate Change Order file) file must be generated in the SafeGuard Policy Editor and installed on the SafeGuard client machine. Restart the SafeGuard client machine to trigger a new local cache backup.
Please note: A repair operation on the new client configuration package does not solve the issue.