How to change the password for Sophos Update Manager (SUM)

This article describes

1. How to change the password for Sophos Update Manager (SUM) in Enterprise Console and in Sophos Control Center
2. How to change the username and password for the updating policy in Sophos Control Center.

Known to apply to the following Sophos products and versions
Enterprise Console version 4
Sophos Control Center version 4

What to do

In the paths given in the following procedure, substitute either 'Enterprise Console' or 'SCC' (without quote marks) in place of <console> according to whether you have Enterprise Console or Sophos Control Center.

1. Go into Computer Management (or Active Directory Users and Computers) and change the password for the SophosUpdateMgr user.
2. Go to http://www.sophos.com/tools/ObfuscationUtil_40.exe. and get a copy of ObfuscationUtil.exe. Alternatively, if you have Enterprise Console, you can get it from the tools directory in C:\sec40.
3. Copy ObfuscationUtil.exe to C:\Program Files\Sophos\<console>
4. Open a command prompt and change directory to C:\Program Files\Sophos\<console>
5. Type the command:
   ObfuscationUtil_40.exe --obfuscate <password> (use the password you set in step 1).
6. Right-click on C:\Program Files\Sophos\<console>\SUM\system.xml and select Edit. From here you can change the <ImpersonationAccount> section.
7. Locate the object called <Password installer-obfuscated="true">. This contains the obfuscated password for the current impersonation account. Make the following two changes.
   • Change the object name from
     <Password installer-obfuscated="true">
to
     <Password obfuscated="true">
   • Remove the current obfuscated password string and paste in the result from the ObfuscateUtil.exe command you ran in step 5.
8. Save your changes to system.xml.
9. Restart the 'Sophos Update Manager' service.

   NOTE: The new password is now stored in the private store, and can be used by the Management Service.

10. Now do one of the following according to whether you have Enterprise Console or Sophos Control Center:
    • If you have Enterprise Console check your Updating Policies. To change the username, use the UpdateManagerHelper tool as described in the knowledgebase article How to change the username and password for the updating policy. NOTE: This procedure will change the username of the default account: SophosUpdateMGR.
    • If you have Sophos Control Center, you must now follow the procedure in the knowledgebase article How to change the username and password for the updating policy in Sophos Control Center, version 4.