After migrating Sophos Disk Encryption 5.61 managed via Sophos Enterprise Console to SafeGuard Enterprise by following the steps described in the Sophos Disk Encryption License Migration Guide (Chapter 5 - Sophos Disk Encryption 5.61 to SafeGuard Enterprise), the SafeGuard Client correctly reports to the SafeGuard Enterprise Server and can be managed by it. The Sophos Enterprise Console no longer displays encryption related information for the client.
The migration was successful and the client was able to communicate with the new SafeGuard Enterprise Server.
If the SafeGuard Client version was then upgraded from Sophos Disk Encryption version 5.61 to SafeGuard Enterprise 6.10, the SafeGuard Client starts receiving policies from both, the SafeGuard Enterprise Server and the Sophos Enterprise Console. This occurs after the machine is rebooted.
First seen in
Sophos Disk Encryption 5.61.0
SafeGuard Device Encryption 6.10.0
During the upgrade of Sophos Disk Encryption 5.61 to SafeGuard Enterprise 6.10, the Sophos Disk Encryption adapter (SEA_RMS_Adaptern.dll) will be restored, causing the client to communicate with both, the new SafeGuard Enterprise Server and the old Sophos Enterprise Console.
What To Do
After successfully upgrading the Sophos Disk Encryption 5.61 Client to SafeGuard Enterprise 6.10, clear the "Sophos Encryption Adapter" plugin registration from the Clients registry:
- Open the registry (Start | Run ...| Regedit)
- Browse to the "Sophos Encryption Adapter" plugin following registry key (e.g.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Sophos\Remote Management System\ManagementAgent\Adapters\SEA)
- Clear the value data in the "
DLL" key and press "
- Reboot the SafeGuard Client
After clearing the Sophos Encryption Adapter DLL key, the SafeGuard Client no longer reports any encryption related information back to the Sophos Enterprise Console and also ignores "Full disk encryption" policies pushed via the Sophos Enterprise Console.
Related article: How to: Migrating Sophos Disk Encryption 5.61 Clients to SafeGuard Enterprise and upgrading the client version to SafeGuard Enterprise 6.10