How to disable the autocomplete feature for the Sophos Mobile Control login pages

  • Article ID: 119958
  • Updated: 13 May 2014

This article describes how to deactivate the Autocomplete feature of the Sophos Mobile Control login pages.
Some security checks are seeing this as vulnerability and deactivating this feature might be necessary.

Known to apply to the following Sophos product(s) and version(s)

Sophos Mobile Control

What To Do

Follow the below steps to deactivate the autocomplete feature for the administrative and self service portal login page.

  1. Stop the SMC Service
  2. Open the file %MDM_HOME%\jboss\server\mdm\deploy\smartManBo.ear using 7zip
  3. In this archive open the file smartMan.war
  4. Open the file login.jsp and search for the "Form" element (starts with <form)
  5. Add the parameter autocomplete="off" in the form tag.
  6. Close the file login.jsp and select to update the archive
  7. Close 7zip and select to save the changes
  8. Open the file %MDM_HOME%\jboss\server\mdm\deploy\smartManBo.ear using 7zip
  9. In this archive open the file smartManSelfprov.war
  10. Open the file login.jsp and search for the "Form" element (starts with <form)
  11. Add the parameter autocomplete="off" in the form tag
  12. Close the file login.jsp and select to update the archive
  13. Close 7zip and select to save the changes
  14. Start the SMC Service
Please note: After an update of SMC it might be necessary to repeat these steps

 
If you need more information or guidance, then please contact technical support.

Rate this article

Very poor Excellent

Comments