Media Passphrase information on removable devices won't be updated when the passphrase will be changed

  • Article ID: 121046
  • Rating:
  • 4 customers rated this article 6.0 out of 6
  • Updated: 12 Feb 2016


SafeGuard Enterprise Data Exchange supports the definition of a single Media Passphrase that will give you access to all removable devices connected to your computer. This is independent of the key that is used for encrypting the individual files.
If specified, access to encrypted files can be granted by entering only one Media Passphrase. The Media Passphrase is bound to computers for which you have logon permission. This means that you use the same Media Passphrase on each computer.

The Media Passphrase can be changed and will be synchronized automatically on each computer you are working on, as soon as you connect removable media to this computer.

Due to an issue in SafeGuard Enterprise Data Exchange, Media Passphrase information on a removable device won't be updated accordingly.

When using the SGPortable application (e.g. trying to access encrypted data on a system that does not have SafeGuard Enterprise Data Exchange module installed), the new Media Passphrase is not accepted by SGPortable. Nevertheless encrypted data can still be accessed using the original Media Passphrase or using a system with the SafeGuard Data Exchange Client installed.

First seen in
SafeGuard Data Exchange 6.10.0

Operating systems
Windows 7 SP1,
Windows 8.x


Changes of the Media Passphrase for a given removable device are not updated on the removable device. The SafeGuard Enterprise Client is failing silently when updating the information on the device itself.

What To Do

This issue will be resolved with the next release of SafeGuard Enterprise. Until available, the following SafeGuard Enterprise Data Exchange hotfix can be installed on the client to resolve the issue.


MD5: ab79e81f830006011d937b06b78f7a5febec798d *SGN_FEDevPolCtrl.dll
SHA1: 291c35c418787f792316cc5e1b13bf5e *SGN_FEDevPolCtrl.dll


On the affected SafeGuard Enterprise Data Exchange Client:

  • Navigate to the SafeGuard Enterprise Client install directory (e.g. C:\Program Files (x86)\Sophos\SafeGuard Enterprise\Client)
  • Rename SGN_FEDevPolCtrl.dll to
  • Copy the hotfix version of SGN_FEDevPolCtrl.dll into the SafeGuard Enterprise Client install directory (e.g. C:\Program Files (x86)\Sophos\SafeGuard Enterprise\Client)
  • Sign out and sign in again

If you need more information or guidance, then please contact technical support.

Rate this article

Very poor Excellent