Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 5 replies
  • Answers 1 answer
  • Subscribers 6 subscribers
  • Views 11748 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Safeguard Enterprise 8 - The key store is not initialized. Please re-login!

Harry Theodorou

Hello,

First i would like to state that i have tried to follow older threads on this issue but they did not resolve my problem. Also they refered to old versions of Safeguard so i opened a new thread.

I am testing on our domain and have successfully set up for the Server (2012 R2) and 2 Windows 10 clients (1709 and 1803). The Sophos Safeguard version installed is 8.00.2.16 and client version 8.00.0.251.

Initial installations are correct however when a second user tries to log on to either computer it says "The key store is not initialized. Please re-login!". We have added the second user accounts to the computers in question and the "Can become owner" checkbox is selected. User account is reported as SGN user and not guest but no key rings or User certificate are installed for second account.

We have also manually added the root syncronised encryption key under "Users and Computers" to the second user but i don't see an option to add a certificate for that user. Computer certificate has however been installed on the machine as Local certificate in Trusted root certification authorities.



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to Haridoss Sreenivasan

    Hello Haridoss,

    The users are not under the "Unconfirmed users" list. 

    I have also allowed registration of new SGN users for setting and select Everybody from the drop-down list as per the document and the same thing happes. However i had a user who had successfully set up his account on a different machine log it to mine and that one worked fine.

    So to sum up both users which initially set up the encryption software on separate machines work on the same machine as well. A third account connecting to either machine does not see the key ring.

  • 0 in reply to Harry Theodorou

    Probably not the right way of doing this, but when I experienced this I deleted the key for the user and let it be recreated. This resolved my issue but it's a bit of a drastic solution!

     

    *** sorry - edited this from workstation to user. Wasn't concentrating when I typed it quickly!

  • 0 in reply to MichaelMcLannahan

    Hello MichaelMcLannahan,

    Can you please elaborate how to delete the key from the workstation? This might be acceptable for our workflow as it will be actioned only when changing owners of the computers.

  • 0 in reply to Harry Theodorou

    Hi - Sorry, I mistyped and meant to put user and not workstation.

     

    Find the user within the console. First tab is Key. Select the key and delete (right click or there's a button along the top row)

     

    Hope that helps?

Unfiltered HTML