The Sophos Community will be offline for scheduled maintenance this Saturday, May 27th, at 13:00 UTC for approximately 1 hour. Apologies for any inconvenience caused.
"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
Sophos SafeGuard Authentication Service is not running, no further action possible!
Known to apply to the following Sophos product(s) and version(s): SafeGuard Device Encryption
1.) Microsoft Forefront Endpoint Protection 2010 is preventing the SafeGuard Authentication service from starting successfully. or 2.) The SafeGuard Authentication service depends on a service (i.e. SmartCard Service) which is unable to start during the Windows login.
If clients are running Microsoft Forefront Endpoint Protection 2010 and the Microsoft Forefront definition versions are older than Dec 28, 2012, the application prevents the SafeGuard Authentication Service from starting up successfully. This issue only occurs with Microsoft Forefront Endpoint Protection 2010 with Microsoft Forefront definitions older than Dec 28, 2012 installed. It affects several SafeGuard installations (reported from version 5.50.8 to 6.00.1).
This issue was analysed by Microsoft and is caused by defective Microsoft Forefront definitions. Updated definitions (definition version: 1.141.2713.0 - Dec 28, 2012 08:09 AM UTC) that resolve the problem are now available. Please update the affected clients with the new definitions to resolve the issue.
If logon to an affected client is not possible and definitions cannot be updated, please try the following:
In addition to the above, make sure that the SafeGuard LocalCache is always excluded from the Microsoft Forefront / System Center 2012 Endpoint Protection scan. For details, see Sophos Knowledge Base Article 108531 - SafeGuard Enterprise: Considerations when installing with other applications, in the "Anti-Virus software" section.
"Sophos SafeGuard Authentication Service is not running. No further action possible."
If you encounter the above error after Windows 7 has loaded, but before the welcome screen appears, and only Username & Password (no smartcard or tokens) are used to authenticate to the system, take the following steps:
Windows 7 will now reboot and will bring you to the welcome screen.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.