In SafeGuard Enterprise, the encryption of a drive and/or partition is triggered by a policy. On the other hand, a SafeGuard Device Encryption Client does not allow a decryption of a disk and/or partition if is not explicitly allowed by a "decryption" policy that is assigned to the client.
In the document below the required steps are described in detail.
Known to apply to the following Sophos product(s) and version(s)
SafeGuard Device Encryption
What To Do
Please follow the steps in the following document to allow and perform a decryption (without uninstallation) of a SafeGuard Enterprise Client:
Decrypting a SafeGuard Enterprise client.pdf
This document applies to the following Sophos products:
SafeGuard Enterprise: 6.x, 7.x