This article explains how to use SGNRollback.exe to repair a failed SafeGuard Enterprise installation.
Apply to the following Sophos product(s) and version(s) SafeGuard Device Encryption
The SGNRollback tool (which is available in the "tools" folder of the product delivery) can be started from a recovery system, either WindowsPE 2.0 or BartPE, to repair a broken installation. The process is mostly automated.
Parameters: -drv WinDrive drive letter with SafeGuard Enterprise installation to be repaired This parameter can only be used in recovery mode and has to be used on multi-boot environments where it is not possible for the tool to find the correct drive itself.
The SGNRollback tool can only repair an unsuccessful endpoint installation if the following pre-conditions are true:
After starting the SGNRollback tool from the recovery system the first step is:
After the first step is finished the user is asked to remove the recovery device. After this the machine will be rebooted into the Safe Mode of the operating system:
The SGNRollback tool is deployed as a single executable without installation.
The end user is responsible for integrating the SGNRollback tool into the recovery system (WindowsPE or BartPE). It can be started manually in the recovery system or added to the autostart of the recovery system.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.