How to change the password for Sophos Update Manager (SUM)

  • Article ID: 65318
  • Rating:
  • 6 customers rated this article 1.3 out of 6
  • Updated: 25 Nov 2013

This article describes how to change:

  1. The password for Sophos Update Manager (SUM) in Enterprise Console and in Sophos Control Center
  2. The username and password for the updating policy in Sophos Control Center.

Known to apply to the following Sophos products and versions

Sophos Control Center 4.0.0
Enterprise Console 5.0.0
Enterprise Console 4.7.0
Enterprise Console 4.5.0

What To Do

Note: For all the folder path mentioning 'Program Files' below on a 64-bit computer 'Program Files' is 'Program Files (x86)'.

1. Locate the tool

Control Center

If you are using the Small Business Control Center you should download the tool from:

Enterprise Console/Manager

The tool is downloaded and extract with the installer and is located in the C:\sec_XX\tools\ folder (where XX is the version of console).  For example: in Enterprise Console 5.0 the tool is located at: C:\sec_50\tools\ObfuscationUtil.exe

2. Copy the tool to the correct folder

The tool must be copied to the correct folder before it is run.  Place a copy of the tool in the following folder depending to the console version:

  • Control Center: C:\Program Files\Sophos\SCC\
  • Enterprise Console: C:\Program Files\Sophos\Enterprise Console\
  • Enterprise Manager: C:\Program Files\Sophos\Enterprise Manager\

3. Update the SophosUpdateMgr account

  1. Go into Computer Management (or Active Directory Users and Computers) and change the password for the SophosUpdateMgr user.
  2. Open a command prompt (Start | Run | Type: cmd.exe | Press return) and change directory to the folder containing the tool (see above).
  3. Type the command:
    • Control Center: ObfuscationUtil_40.exe --obfuscate <password>
    • Enterprise Console/Manager: ObfuscationUtil.exe --obfuscate <password>
    (use the password you set in step 1).
  4. Right-click on system.xml and select Edit. From here you can change the <ImpersonationAccount> section.
  5. Locate the object called <Password installer-obfuscated="true">. This contains the obfuscated password for the current impersonation account. Make the following two changes.
    • Change the object name from
      <Password installer-obfuscated="true">
      <Password obfuscated="true">
    • Remove the current obfuscated password string and paste in the result from the ObfuscateUtil.exe command you ran in step 5.
  6. Save your changes to system.xml.
  7. Restart the 'Sophos Update Manager' service.

    Note: The new password is now stored in the private store, and can be used by the Management Service.

  8. Now follow article 112598 to change the username and password for the updating policy.

If you need more information or guidance, then please contact technical support.

Rate this article

Very poor Excellent