How to disable the autocomplete feature for the Sophos Mobile Control login pages

  • Article ID: 119958
  • Updated: 24 Mar 2016

This article describes how to deactivate the autocomplete feature of the Sophos Mobile Control login pages.
Some security checks are seeing this as vulnerability and deactivating this feature might be necessary.

Known to apply to the following Sophos product(s) and version(s)
Sophos Mobile Control

What To Do

Follow the below steps to deactivate the autocomplete feature for the administrative and self service portal login page.

For SMC 4.0 or lower:

  1. Stop the SMC Service
  2. Open the file %MDM_HOME%\jboss\server\mdm\deploy\smartManBo.ear using 7zip
  3. In this archive open the file smartMan.war
  4. Open the file login.jsp and search for the "Form" element (starts with <form)
  5. Add the parameter autocomplete="off" in the form tag.
  6. Close the file login.jsp and select to update the archive
  7. Close 7zip and select to save the changes
  8. Open the file %MDM_HOME%\jboss\server\mdm\deploy\smartManBo.ear using 7zip
  9. In this archive open the file smartManSelfprov.war
  10. Open the file login.jsp and search for the "Form" element (starts with <form)
  11. Add the parameter autocomplete="off" in the form tag
  12. Close the file login.jsp and select to update the archive
  13. Close 7zip and select to save the changes
  14. Start the SMC Service

For SMC 5 or newer:

  1. Stop the SMC Service
  2. Opent the file %MDM_HOME%\wildfly\standalone\deployments\smc.ear using 7zip
  3. In this archive, open the file smc-adminui.war
  4. Open the file login.xhtml and search for the "Form" element (starts with <h:form)
  5. Search for the parameter autocomplete="false" and replace "false" with "off"
  6. Close the file login.xhtml and select to update the archive
  7. Close 7zip and select to save the changes
  8. Open the file %MDM_HOME%\wildfly\standalone\deployments\smc.ear using 7zip
  9. In this archive open the file smc-ssp.war
  10. Open the file login.xhtml and search for <h:input
  11. There should be three results for this search. After every result, insert autocomplete="off" in front of the "id=" entry
  12. Close the file login.xhtml and select to update the archive
  13. Close 7zip and selcect to save the changes
  14. Start the SMC Service
Please note: After an update of SMC it might be necessary to repeat these steps

 
If you need more information or guidance, then please contact technical support.

Rate this article

Very poor Excellent

Comments