Mac OS X 10.10 Yosemite, SAV Mac 9.2.2, and You

With Yosemite, the uninstall video by ruckus which describes how to clean up the keychain no longer works.

The Keychain List item in the Edit menu has gone in 10.10.

The link to the video is

http://openforum.sophos.com/t5/Mac-tools-help/How-to-remove-the-read-only-Sophos-keychain-after-uninstalling/td-p/15027

Is there a solution for this in Yosemite?

As above asked, how to remove keychain of sophos after uninstalling Sophos 9.2.2 in Yosemite OSX 10.10.

There isn't any more the 'Keychain List' in Keychain Access on Yosemite.

It would be great to get this keychain issue resolved in Yosemite. Thanks for your help and looking into this.

Hello,

until we address this issue in a future release, please use this workaround to remove Sophos keychain from the search list entries.

1) open Terminal.app

2) convert the binary security plist to xml using the following command:

    sudo plutil -convert xml1 com.apple.security-common.plist

3) use your favourite editor and remove all occurences of these lines

    <dict>
        <key>DbName</key>
        <string>/Library/Sophos Anti-Virus/Sophos.keychain</string>
        <key>GUID</key>
        <string>{87191ca3-0fc9-11d4-849a-000502b52122}</string>
        <key>SubserviceType</key>
        <integer>6</integer>
    </dict>

make sure everyting from <dict> to </dict> is deleted. 

4) save the file and you'll noticethat Sophos keychain is gone from the Keychain Access.app sidebar.

Frank Fenn

Sr. Software Engineer

Sophos Inc.

We will be making some improvements in the software in the future to delete our keychain item automatically. Until that is available, Frank's solution will work, but we definitely recommend using caution.

Hi. Thanks for your help. I'm seemng to have issues with step 2, "convert the binary security plist to xml using the following command: sudo plutil -convert xml1 com.apple.security-common.plist"

I'm getting the following error:

com.apple.security-common.plist: file does not exist or is not readable or is not a regular file (Error Domain=NSCocoaErrorDomain Code=260 "The file “com.apple.security-common.plist” couldn’’’’t be opened because there is no such file." UserInfo=0x7f8c8bc09510 {NSFilePath=com.apple.security-common.plist, NSUnderlyingError=0x7f8c8bc05dd0 "The operation couldn’’’’t be completed. No such file or directory"})

Any idea what the issue is? I can see the file you're talking about. Is it because it's locked or something?

Thanks again.

We released version 9.2.2 to all Home Edition endpoints earlier today, this version contains the latest updates and is compatible with Mac OS X 10.10. Although the previous version (9.1.5) was also compatible, this update brings the latest improvements and refinements.

---

suprimeau wrote:

I'm getting the following error:

com.apple.security-common.plist: file does not exist or is not readable or is not a regular file (Error Domain=NSCocoaErrorDomain Code=260 "The file “com.apple.security-common.plist” couldn’’’’t be opened because there is no such file." UserInfo=0x7f8c8bc09510 {NSFilePath=com.apple.security-common.plist, NSUnderlyingError=0x7f8c8bc05dd0 "The operation couldn’’’’t be completed. No such file or directory"})

---

Frank's example omitted the full path to the plist file. The correct "step 2" command is:

sudo plutil -convert xml1 /Library/Preferences/com.apple.security-common.plist

That should get your file converted from binary back to editable text.

Perfect that worked. The rest of Frank's steps worked as well. I used TextMate to delete the required information. The built in TextEdit app won't work.

Thanks again.

Hi,

I've just registered witht his forum, but actually I was looking for a Bug Report option. I will post it here now:

After some testing I today confirmed that Sophos Mac Home 9.2.2 on OSX 10.10 Yosemite severly caps my internet download speed. I have a 120Mb/s downstream/12Mb/s upstream connection, and I noticed slower internet connections (with Speedtest by Ookla). It tops out at arround 70Mb/s down (upstream no difference, is good):

After swithing off all Sophos modules, and then one-by-one turning them back on, I found that one or both options of the Web Protection makes my internet slow. As you can see in the picture above, the speedtest is done with only the 2nd option from Web Protection is on, and you can see the downstream speed of 68.86Mb/s

After turning all Web Protection option off, I regain my full downstream speed, as seen below:

I've tried it several times, and everytime the same result. All other Sophos modules (On Acces, Live Protection, etc) do not have any impact.

This was NOT the case with Sophos on 10.9 Mavericks and before.

Can anybody from Sophos confirm this issue?