"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
This article provides information on the Sophos tool 'ExportPrivateStore.exe'.
Note: For Enterprise Console 5.2 and later, this tool is no longer supported. Instead the tool 'DatabackupRestore.exe' should be used as part of server to server migrations or as part or routine backups of the system.
First seen in Enterprise Console 4.0.0
When you enter account information into the console:
...it is securely saved in the registry of the Sophos Management Server, in the 'Private Store'.
The 'ExportPrivateStore.exe' tool is a command line program. It can securely export all Private Store information from a management server installation. This information can then be imported back into the registry later on.
This tool is useful in migration and disaster recovery situations.
The DataBackupRestore.exe tool is the preferred and recommended method of backing up and restoring the Private Store. However it is not always possible to use the tool (where indicated in other knowledgebase articles) and hence this tool is still available.
Options: -i, --import : Adds items from the specified file to the private store -e, --export : Exports items from the private store to the specified file -d, --delete : Deletes the contents of the private store (USE WITH CAUTION!) -f, --force : Overwrite the existing file when exporting OR overwrite existing items when importing OR suppress confirmation when deleting -s, --sync-settings : Include AD synchronization settings -v, --version : Display version information -h, --help : Shows this message
Yes. This program will work only when executed as LocalSystem.
To do this, download PsExec and prefix the command line with PsExec -s.
Use the links below to download the correct version of the tool for the console version you have installed. You will need your MySophos credentials.
psexec.exe -s C:\sec_51\tools\ExportPrivateStore.exe -e C:\sec_51\tools\SophosPS-export.xml
The Private Store is has now been securely exported to an XML file called 'SophosPS-export.xml' the 'C:\sec_51\tools\' folder.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.