Sophos

Online support

Product maintenance

Contact support

Support services

Certification Manager: significant files and registry entries

Significant files

Location: The files that comprise the Certification Manager all reside in C:\Program Files\Sophos\Enterprise Console\

CertificationManagerServiceNT.exe

This is the main executable that forms the service. There are various dlls, developed by Sophos, that provide the functionality of the Certification Manager:

  • CertificationManagerDLL.dll
  • CertificationClientLibrary.dll
  • CertificationLib.dll
  • MSClientLib.dll
CMIssuedCertificates.log 

Each certificate issued by the Certification Manager is recorded in the issued certificate log file.

Location: C:\Program Files\Sophos\Enterprise Console\CertificationManager\IssuedCert\CMIssuedCertificates.log

The following example shows that a client called XP01 has been successfully issued with three certificates. These include one for the Message Router, one for the AutoUpdate Agent (ALC) and one for the Sophos Agent (Agent):

*1#1122747119#840156#CN=Router$XP01:756111#router#250725181159Z
*1#1122747132#840157#OU=Router$XP01:756111/CN=ALC#managedApp#250725181212Z
*1#1122747143#840158#OU=Router$XP01:756111/CN=Agent#delegatedManager#250725181223Z

Where:
* is the start of a new entry
# is a field separator

The values, in order, represent:
<version of record format>
<time of issue> (Seconds since 1/1/1970)
<certificate serial number>
<certificate subject name>
<certificate subject role >
<certificate expiry time>

CertManager-<timestamp>.log

This log file lists the messages that are processed by the Certificate Manager and the actions it takes.

Location: C:\Program Files\Sophos\Enterprise Console\CertificationManager\Logs\CertManager-<timestamp>.log

Example:

30.07.2005 11:22:19 0C44 I SOF: CertificationManager/Logs/CertManager-20050730-102219.log
30.07.2005 11:22:19 0C44 I [CertMgr]Certification Manager starting...
30.07.2005 11:22:22 0C44 I [CertMgr]Certification Manager started

The values, in order, represent:
<date>
<time>
<thread-id>
<log-level>
[<CM component>]
<Event info>

Significant registry entry

HKLM\SOFTWARE\sophos\Certification Manager\UniqueToken

The Certification Manager is also required to issue tokens to requesting client Message Routers in order to construct a unique name for the router within the messaging system. In order that the numbers issued are unique, the last issued token value must be persistent if the service is stopped. The values are incremented by one for each token request in the session of the Certification Manager service. The last issued number is held in this registry key.

Value = <value in hex>
Quantum = <value in hex>

Where:
Value is in Hex, E.g. B6 AC 0B 00 (0BACB6 = 765110 decimal)
And Quantum, e.g. 28 23 is also added each time the service is restarted to further ensure values to be unique.

If you need more information or guidance, then please contact technical support.