This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Safeguard Enterprise 6.0

Hi,

I have to questions.

The first one is regarding the documentation. For the client installation with file-based encryption only (SGNClient_withoutDE_x64) in Windows 7 computers the documentation doesn't mention to use the CredentialProvider switch but if you don't use it, users won't get synchronized with the server and the key ring store will be unavailable therefore the encryption is not possible.... Am I missing something?

The second question is about USB encryption with SGPortable. My policies are set to automatically copy the SGPortable to USB devices and SGPortable is being copied but the file has 0KB and when launched I get an error saying it's not a valid Win32 application. At first I thought it was the Sophos Endpoint blocking it but I have tested it in a computer without Sophos Endpoint and I get the same issue. How should I proceed?

Thanks

:43053


This thread was automatically locked due to age.
Parents
  • Hi,

    ***

    The first one is regarding the documentation. For the client installation with file-based encryption only (SGNClient_withoutDE_x64) in Windows 7 computers the documentation doesn't mention to use the CredentialProvider switch but if you don't use it, users won't get synchronized with the server and the key ring store will be unavailable therefore the encryption is not possible.... Am I missing something?

    ***

    That´s correct, the installation of the CredentialProvider is always required on Windows Vista / W7, this is independend of the installed SGN modules.

    ***

    The second question is about USB encryption with SGPortable. My policies are set to automatically copy the SGPortable to USB devices and SGPortable is being copied but the file has 0KB and when launched I get an error saying it's not a valid Win32 application. At first I thought it was the Sophos Endpoint blocking it but I have tested it in a computer without Sophos Endpoint and I get the same issue. How should I proceed?

    ***

    The function "Copy SGPortable to target" does not only copy the executable itself.

    The following files are copied (and required for a proper use of the tool):

    root:

    - SGportable (shortcut to the executable in the hidden folder)

    - SGPortable (hidden folder)

    "SGPortable" folder (hidden)

    - msvcp71.dll

    - msvcr71.dll

    - SGNKeytable.ktb.bak (only required if a media passphrase is used)

    - SGPortable.exe

    Depending on your configuration of Data Control in the SEC Console it could be, that some of these files are blocked and therefor the tool cannot be started correctly. If the copy process itself (not just starting the tool) was tested on a client w/o Sophos Endpoint, there might be another 3rd party software blocking these file types.

    Hope that helps!

    Cheers

    Michael

    :43119
Reply
  • Hi,

    ***

    The first one is regarding the documentation. For the client installation with file-based encryption only (SGNClient_withoutDE_x64) in Windows 7 computers the documentation doesn't mention to use the CredentialProvider switch but if you don't use it, users won't get synchronized with the server and the key ring store will be unavailable therefore the encryption is not possible.... Am I missing something?

    ***

    That´s correct, the installation of the CredentialProvider is always required on Windows Vista / W7, this is independend of the installed SGN modules.

    ***

    The second question is about USB encryption with SGPortable. My policies are set to automatically copy the SGPortable to USB devices and SGPortable is being copied but the file has 0KB and when launched I get an error saying it's not a valid Win32 application. At first I thought it was the Sophos Endpoint blocking it but I have tested it in a computer without Sophos Endpoint and I get the same issue. How should I proceed?

    ***

    The function "Copy SGPortable to target" does not only copy the executable itself.

    The following files are copied (and required for a proper use of the tool):

    root:

    - SGportable (shortcut to the executable in the hidden folder)

    - SGPortable (hidden folder)

    "SGPortable" folder (hidden)

    - msvcp71.dll

    - msvcr71.dll

    - SGNKeytable.ktb.bak (only required if a media passphrase is used)

    - SGPortable.exe

    Depending on your configuration of Data Control in the SEC Console it could be, that some of these files are blocked and therefor the tool cannot be started correctly. If the copy process itself (not just starting the tool) was tested on a client w/o Sophos Endpoint, there might be another 3rd party software blocking these file types.

    Hope that helps!

    Cheers

    Michael

    :43119
Children
No Data