Following the deletion of a Mac computer in Sophos Cloud the computer cannot be re-registered with the Cloud without uninstalling and re-installing Sophos Anti-Virus.
First seen in
Sophos Cloud Managed Endpoint
Mac OS X
When the Sophos Installer is re-run over the top of an existing install, it is seen as an upgrade and not a fresh install as all the registration has already been performed. The following message will appear in Install.log:
Upgrading the "saas" product.
As the computer has been deleted in the Cloud interface, the Mac cannot communicate using the existing registration information.
What To Do
It is recommended to remove and re-install Sophos Anti-Virus for Mac. For more information on how to remove Sophos Anti-virus for Mac see article 121507 or 120856.
Note: Sophos Cloud stores previously generated Tamper Protection passwords and these can be found under https://cloud.sophos.com/global-settings/tamper-protection. This maybe required if a new password has been generated after a Mac was deleted from Sophos Cloud.
To force a re-registration without uninstalling and re-installing the following procedure may also be followed:
- Follow the step 2 and 3 set out in KB122638 for removing the keychain (Skip the uninstall)
- Open Terminal from Spotlight (press Cmd + Spacebar, type 'terminal', and press enter).
- Run the following commands:
- sudo killall SophosConfigD
- sudo launchctl stop com.sophos.mcs
- Reboot the Mac
The Mac will now perform the registration and should as managed.