Obfuscating the username and password in Enterprise Console

  • Article ID: 13094
  • Rating:
  • 12 customers rated this article 4.1 out of 6
  • Updated: 09 Sep 2015

A utility called ObfuscationUtil.exe is provided with Enterprise Console. This utility enables you to hide usernames and passwords from other users on the system. The Sophos Anti-Virus setup program can use these obfuscated names as the credentials for automatic updates of Sophos Anti-Virus.

ObfuscationUtil.exe can be found in the unpacked installation folder C:\sec_xx\Tools.

Watch the Video

What to do

  1. Copy ObfuscationUtil.exe to the Enterprise Console folder, which by default is:

    On x86 operating systems:
    C:\Program Files\Sophos\Enterprise Console

    On x64 operating systems:
    C:\Program Files (x86)\Sophos\Enterprise Console
    Note: ObfuscationUtil.exe may request that it is copied to the location of libeay32.dll. This is not an absolute requirement, and if this file/location does not exist, copy the tool to the location given above. 
  2. Open a command prompt.
  3. Change directory to the Enterprise Console directory
  4. Type the following commands:

    ObfuscationUtil.exe --obfuscate <username> -w
    ObfuscationUtil.exe --obfuscate <password> -w

    where <username> and <password> are the username and password that you want to obfuscate

    Note: If you are obfuscating the credentials used by the Management Service to access the SQL database, only the database user password should be obfuscated. The database user username should not be obfuscated.
  5. The obfuscated username and password are displayed. Make a note of the obfuscated strings used for the username and password.
  6. When you use Sophos Enterprise Console to install Sophos Anti-Virus on workstations, or when you add the Sophos Anti-Virus setup program to a login script, enter the obfuscated username and/or password. For example, in a login script, add

    setup.exe -ouser <obfuscated username> -opwd <obfuscated password>

    in full this might be (note S000 is a default number - replace the folder name accordingly for your system):

    \\<servername>\SophosUpdate\CIDs\S000\SAVSCFXP\setup.exe -updp "\\<servername>\SophosUpdate\CIDs\S000\SAVSCFXP" -ouser <obfuscated username> -opwd <obfuscated password> -mng yes

When the setup program runs, it converts the obfuscated username and/or password to the real ones, and uses these as the credentials for automatic updating.

For more information on the command line parameters used with setup.exe, see knowledgebase article 12570.

If you need more information or guidance, then please contact technical support.

Rate this article

Very poor Excellent