This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to configure Sophos Safeguard Encryption on Mac OS X (10.11.6 - El Capitan)

I have installed the latest version of Sophos SafeGuard on a Mac OS X El Capitan (10.11.6) and I cannot get the synchronisation to work

I have added the self signed certificates to the Keychain as I used to do with previous OS X versions with no results

Any help will be welcome

Thanks

This thread was automatically locked due to age.

0 MichaelMcLannahan over 7 years ago

Which actual version of Sophos SafeGuard are you running Dornao?

I did have some issues with Sierra and SG as you described - previously trusted certs were suddenly no longer good enough!! I updated my back end and client and now everything's fine again.

I'm currently running 8.00.2.13 on the servers and my Mac client is running 8.00.1.7

My certs are externally signed with a CA so I didn't have any trust issues. Self signed certs "should" be ok though as long as you're just doing this all internally?
Cancel
Vote Up 0 Vote Down

Cancel
0 dornaofimatica over 7 years ago in reply to MichaelMcLannahan

we have 8.00.1.7 on the client and 8.00.0.280 on the server side
Cancel
Vote Up 0 Vote Down

Cancel
+1 MichaelMcLannahan over 7 years ago in reply to dornaofimatica

Hmm... Sounds new enough? How annoying/odd.

As a quick test is it worth trying to disable server SSL on the client to see if that resolves/identifies the issue?

https://community.sophos.com/kb/en-us/124760
Cancel
Vote Up 0 Vote Down

Cancel
0 dornaofimatica over 7 years ago in reply to MichaelMcLannahan

that seems to work, now at least the client is able to connect to the server

thanks lot for your quick response!

/x
Cancel
Vote Up 0 Vote Down

Cancel
0 MichaelMcLannahan over 7 years ago in reply to dornaofimatica

Great news and you're very welcome!

Worth doing some more testing now we know the certs aren't being trusted by your client.

Did you go into Keychain Access and set the custom settings of the cert to be always trust for SSL? (Utilities - Keychain Access - System - Select your cert - Use Custom settings - Always trust for SSL)

Good luck!

Michael
Cancel
Vote Up 0 Vote Down

Cancel
0 dornaofimatica over 7 years ago in reply to MichaelMcLannahan

Hi Michael,

I have checked and I have the certs as "Always Trust" (we have two servers, and both servers certificates are always trusted)
Cancel
Vote Up 0 Vote Down

Cancel