An update to Sophos AutoUpdate will be taking place during May 2012 for all systems running Endpoint Security and Control version 9.5, 9.7 (including those in Extended Maintenance) and v10.0
Known to apply to the following Sophos product(s) and version(s)
Sophos Endpoint Security and Control 9.7
Sophos Endpoint Security and Control 9.5
Sophos Endpoint Security and Control 10.0
Information on the update
Sophos AutoUpdate downloads new anti-virus identities, product updates and other data from Sophos. To ensure that the files are secured in transit over the Internet, the files are digitally signed by Sophos, and that signature is checked by AutoUpdate before the files are used.
The certificate currently used at Sophos to sign the files is due to expire in April 2013, and will need to be replaced. Failure to replace the certificate would mean that the downloaded files would be rejected by AutoUpdate after the expiry date.
We plan to replace the certificate later in the year, to ensure the new certificate is in place well ahead of the expiry date and that there is no interruption to service. However, the current version of AutoUpdate requires a minor change in preparation for the use of the new certificate.
We are releasing this minor update now to allow sufficient time to have all installed versions across all systems upgrade before we start to use the new certificate. Once the new version of AutoUpdate is installed, the transition to the new certificate will be transparent to users and will require no further action.